last executing test programs: 2m14.514424383s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='security.selinux\x00') 2m13.313187107s ago: executing program 0 (id=25): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m10.973832029s ago: executing program 0 (id=29): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9}]}}}, 0x8) 2m8.95444929s ago: executing program 0 (id=33): r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), 0x0) io_uring_setup(0x30aa, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000028c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2m5.866128994s ago: executing program 0 (id=38): socket(0x10, 0x3, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="f1fe4a3b8809c5", 0x7, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x37}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x7, 0x10, 0x6, 0x4, 0x7, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m3.782450222s ago: executing program 0 (id=43): futex(0x0, 0x6, 0x2, &(0x7f0000000080), 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x10, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000084}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) 1m48.08470253s ago: executing program 32 (id=43): futex(0x0, 0x6, 0x2, &(0x7f0000000080), 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x10, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000084}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) 1m44.848138872s ago: executing program 3 (id=80): fsopen(&(0x7f00000000c0)='erofs\x00', 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_clone3(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1m43.727654493s ago: executing program 3 (id=83): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000bc9, 0x200) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x3, 0x1}, 0xc) r4 = fsmount(r1, 0x0, 0x82) fchdir(r4) unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x200) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) r9 = dup(r0) r10 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x541b, &(0x7f0000000180)) syz_clone3(&(0x7f0000000480)={0x8000000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000280)=0x0, {0x31}, &(0x7f00000002c0)=""/205, 0xcd, &(0x7f0000000400)=""/4, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r9}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) setpgid(r11, r12) r13 = syz_io_uring_setup(0x20006fa, &(0x7f0000000580)={0x0, 0xf445, 0x1000, 0x2, 0x1cf, 0x0, r9}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r13, 0xf, &(0x7f00000003c0)={0x1000, 0x0, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r14 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1m42.086075743s ago: executing program 3 (id=85): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x6}, &(0x7f00000001c0)=0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000"], 0x0) r8 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r11, r11, r11}, 0x0, 0x0, &(0x7f0000000080)={0x0}) 1m38.416583675s ago: executing program 4 (id=88): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000001100)={0x0, &(0x7f00000010c0)}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m38.204724346s ago: executing program 2 (id=89): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1m36.729134727s ago: executing program 4 (id=90): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x5, [0x0, 0x0, 0xd1, 0x8b, 0xc]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m36.290456091s ago: executing program 3 (id=92): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x20004000) 1m35.856038102s ago: executing program 2 (id=93): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000100) 1m35.649473949s ago: executing program 1 (id=94): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000bc9, 0x200) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x3, 0x1}, 0xc) r4 = fsmount(r1, 0x0, 0x82) fchdir(r4) unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x200) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) r9 = dup(r0) r10 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x541b, &(0x7f0000000180)) syz_clone3(&(0x7f0000000480)={0x8000000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000280)=0x0, {0x31}, &(0x7f00000002c0)=""/205, 0xcd, &(0x7f0000000400)=""/4, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r9}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) setpgid(r11, r12) r13 = syz_io_uring_setup(0x20006fa, &(0x7f0000000580)={0x0, 0xf445, 0x1000, 0x2, 0x1cf, 0x0, r9}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r13, 0xf, &(0x7f00000003c0)={0x1000, 0x0, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r14 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1m34.425237222s ago: executing program 4 (id=95): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) 1m34.153146605s ago: executing program 2 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$vga_arbiter(0xffffff9c, &(0x7f0000000040), 0x62000, 0x0) pwrite64(r3, 0x0, 0x0, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m33.618413366s ago: executing program 3 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) pwrite64(r3, 0x0, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m33.592601666s ago: executing program 1 (id=98): socket(0x10, 0x3, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="f1fe4a3b8809c5", 0x7, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x37}, 0x20) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x7, 0x10, 0x6, 0x4, 0x7, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m32.31382699s ago: executing program 1 (id=99): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000001100)={0x0, &(0x7f00000010c0)}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m31.740566781s ago: executing program 4 (id=100): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x24002000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 1m31.500843151s ago: executing program 1 (id=101): socket$inet6(0xa, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, 0x0) io_uring_setup(0xab1, &(0x7f0000000080)={0x0, 0xdf4, 0x800, 0x0, 0x2}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x4040080) socket$xdp(0x2c, 0x3, 0x0) memfd_create(&(0x7f0000000080)='\x00', 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r3, 0x0, r2, 0x0, 0x40010003, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) 1m27.765856245s ago: executing program 4 (id=102): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1m27.712541882s ago: executing program 2 (id=103): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 1m27.505297334s ago: executing program 3 (id=104): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x54, &(0x7f0000000100)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="24000000010006", 0x7) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40dc0, 0x0) 1m27.031736628s ago: executing program 2 (id=105): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000100) 1m26.968447745s ago: executing program 4 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x50) 1m26.586289397s ago: executing program 1 (id=107): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000bc9, 0x200) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x3, 0x1}, 0xc) r4 = fsmount(r1, 0x0, 0x82) fchdir(r4) unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x200) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) r9 = dup(r0) r10 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x541b, &(0x7f0000000180)) syz_clone3(&(0x7f0000000480)={0x8000000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000280)=0x0, {0x31}, &(0x7f00000002c0)=""/205, 0xcd, &(0x7f0000000400)=""/4, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r9}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) setpgid(r11, r12) r13 = syz_io_uring_setup(0x20006fa, &(0x7f0000000580)={0x0, 0xf445, 0x1000, 0x2, 0x1cf, 0x0, r9}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r13, 0xf, &(0x7f00000003c0)={0x1000, 0x0, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r14 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1m24.572801281s ago: executing program 2 (id=108): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548) 1m24.535804438s ago: executing program 1 (id=109): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x3c, r8, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 1m2.006024922s ago: executing program 33 (id=109): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x3c, r8, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 1m1.667830354s ago: executing program 34 (id=108): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548) 1m1.392557375s ago: executing program 35 (id=104): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x54, &(0x7f0000000100)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="24000000010006", 0x7) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40dc0, 0x0) 1m1.124298138s ago: executing program 36 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x50) 12.578034422s ago: executing program 9 (id=123): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30", @ANYRES16=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 9.331977283s ago: executing program 5 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) pwrite64(r3, 0x0, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.748742137s ago: executing program 9 (id=135): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x11) 8.239250338s ago: executing program 7 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000040), 0x62000, 0x0) pwrite64(r3, 0x0, 0x0, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.888856793s ago: executing program 9 (id=138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x800001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x384e}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 7.749886564s ago: executing program 8 (id=139): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 6.947434294s ago: executing program 8 (id=140): mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r0 = memfd_secret(0x0) fchownat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x34, r6, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}}, 0x0) 6.749223158s ago: executing program 9 (id=141): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x5}, {0x4, 0xeb, 0x8, 0x2, 0x8, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.614177258s ago: executing program 6 (id=142): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000001c0)={r1, 0x9}) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r1}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)) 5.659946482s ago: executing program 6 (id=143): syz_emit_vhci(0x0, 0x0) 5.285428225s ago: executing program 8 (id=144): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000bc9, 0x200) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x3, 0x1}, 0xc) r4 = fsmount(r1, 0x0, 0x82) fchdir(r4) unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x200) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) r9 = dup(r0) r10 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x541b, &(0x7f0000000180)) syz_clone3(&(0x7f0000000480)={0x8000000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000280)=0x0, {0x31}, &(0x7f00000002c0)=""/205, 0xcd, &(0x7f0000000400)=""/4, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r9}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) setpgid(r11, r12) r13 = syz_io_uring_setup(0x20006fa, &(0x7f0000000580)={0x0, 0xf445, 0x1000, 0x2, 0x1cf, 0x0, r9}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r13, 0xf, &(0x7f00000003c0)={0x1000, 0x0, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r14 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 5.139675791s ago: executing program 9 (id=145): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30", @ANYRES16=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 4.953531666s ago: executing program 5 (id=146): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 4.822015198s ago: executing program 6 (id=147): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 4.582876564s ago: executing program 7 (id=148): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x11) 3.252119477s ago: executing program 5 (id=149): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 3.069661557s ago: executing program 8 (id=150): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xb701, 0xfffffffe) ioctl$KVM_CREATE_VCPU(r5, 0xb704, 0x400000020000002) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 2.976866725s ago: executing program 7 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x800001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x384e}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.894103398s ago: executing program 6 (id=152): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x4}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000001100)={0x0, &(0x7f00000010c0)}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.265022285s ago: executing program 5 (id=153): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000001c0)={r1, 0x9}) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r1}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)) 1.997719268s ago: executing program 8 (id=154): mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r0 = memfd_secret(0x0) fchownat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x34, r6, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}}, 0x0) 1.871877547s ago: executing program 6 (id=155): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x5}, {0x4, 0xeb, 0x8, 0x2, 0x8, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.708581285s ago: executing program 7 (id=156): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x24002000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 1.474199036s ago: executing program 5 (id=157): syz_emit_vhci(0x0, 0x0) 849.018749ms ago: executing program 8 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000040), 0x62000, 0x0) pwrite64(r3, 0x0, 0x0, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 754.757497ms ago: executing program 7 (id=159): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2719, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 628.624545ms ago: executing program 5 (id=160): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) 388.710625ms ago: executing program 9 (id=161): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000400)={&(0x7f0000000580)=[0x0, 0x0], 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x8, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0xffffffffffffffc0, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x26], 0x0, 0x2}) r7 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r8 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x40700, 0x0) ioctl$DRM_IOCTL_GET_CTX(r8, 0xc0086423, &(0x7f0000000100)) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xb, 0x4}, 0x4, 0x101, 0x0, 0x6, 0x0, 0x8}}) dup2(r7, r7) 326.292039ms ago: executing program 6 (id=162): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) creat(0x0, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 0s ago: executing program 7 (id=163): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r0, 0x5412, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 155.111730][ T5558] cgroup: Unknown subsys name 'net' [ 155.262490][ T5558] cgroup: Unknown subsys name 'cpuset' [ 155.278554][ T5558] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.731700][ T5558] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 166.175540][ T5577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.185378][ T5577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.195243][ T5577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.211585][ T5577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.222965][ T5577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.338392][ T4871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.354043][ T4871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.364051][ T4871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.381874][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.392650][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.404579][ T5587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.419099][ T5587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.431966][ T5577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.479378][ T5577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.495666][ T5577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.557316][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.568970][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.574381][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.585262][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.594649][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.602528][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.616484][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.625012][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.644092][ T5587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.655049][ T5587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.277009][ T5587] Bluetooth: hci0: command tx timeout [ 168.513481][ T5587] Bluetooth: hci1: command tx timeout [ 168.593473][ T5587] Bluetooth: hci2: command tx timeout [ 168.673523][ T5587] Bluetooth: hci3: command tx timeout [ 168.753385][ T5587] Bluetooth: hci4: command tx timeout [ 170.354906][ T5587] Bluetooth: hci0: command tx timeout [ 170.593763][ T5587] Bluetooth: hci1: command tx timeout [ 170.598072][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.626462][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.653615][ T5576] bridge_slave_0: entered allmulticast mode [ 170.677038][ T5587] Bluetooth: hci2: command tx timeout [ 170.688668][ T5576] bridge_slave_0: entered promiscuous mode [ 170.745038][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.752730][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.760489][ T5576] bridge_slave_1: entered allmulticast mode [ 170.768640][ T5587] Bluetooth: hci3: command tx timeout [ 170.777935][ T5576] bridge_slave_1: entered promiscuous mode [ 170.833680][ T5587] Bluetooth: hci4: command tx timeout [ 170.904221][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.912015][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.923554][ T5584] bridge_slave_0: entered allmulticast mode [ 170.931526][ T5584] bridge_slave_0: entered promiscuous mode [ 171.023520][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.032140][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.040038][ T5584] bridge_slave_1: entered allmulticast mode [ 171.049458][ T5584] bridge_slave_1: entered promiscuous mode [ 171.108413][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.115961][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.123800][ T5591] bridge_slave_0: entered allmulticast mode [ 171.131975][ T5591] bridge_slave_0: entered promiscuous mode [ 171.151183][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.202589][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.210291][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.218393][ T5589] bridge_slave_0: entered allmulticast mode [ 171.226433][ T5589] bridge_slave_0: entered promiscuous mode [ 171.238688][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.246478][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.253994][ T5591] bridge_slave_1: entered allmulticast mode [ 171.262185][ T5591] bridge_slave_1: entered promiscuous mode [ 171.278078][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.318699][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.332563][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.340342][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.347956][ T5589] bridge_slave_1: entered allmulticast mode [ 171.356272][ T5589] bridge_slave_1: entered promiscuous mode [ 171.409892][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.417624][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.425177][ T5580] bridge_slave_0: entered allmulticast mode [ 171.433434][ T5580] bridge_slave_0: entered promiscuous mode [ 171.450287][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.521425][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.529138][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.536998][ T5580] bridge_slave_1: entered allmulticast mode [ 171.545532][ T5580] bridge_slave_1: entered promiscuous mode [ 171.661357][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.709607][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.762694][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.790834][ T5576] team0: Port device team_slave_0 added [ 171.839286][ T5584] team0: Port device team_slave_0 added [ 171.855927][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.947536][ T5576] team0: Port device team_slave_1 added [ 171.981409][ T5584] team0: Port device team_slave_1 added [ 172.058907][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.096234][ T5589] team0: Port device team_slave_0 added [ 172.109065][ T5591] team0: Port device team_slave_0 added [ 172.145750][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.185095][ T5589] team0: Port device team_slave_1 added [ 172.197192][ T5591] team0: Port device team_slave_1 added [ 172.205325][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.212337][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.238732][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.277773][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.285002][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.311126][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.371176][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.378362][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.404523][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.433352][ T5587] Bluetooth: hci0: command tx timeout [ 172.445032][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.452052][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.478423][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.571875][ T5580] team0: Port device team_slave_0 added [ 172.594679][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.601768][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.628691][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.642750][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.650459][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.676905][ T5587] Bluetooth: hci1: command tx timeout [ 172.677367][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.699463][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.706935][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.733625][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.750842][ T5580] team0: Port device team_slave_1 added [ 172.756761][ T5587] Bluetooth: hci2: command tx timeout [ 172.784434][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.791452][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.817802][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.833894][ T5587] Bluetooth: hci3: command tx timeout [ 172.873771][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.880854][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.907058][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.913359][ T5587] Bluetooth: hci4: command tx timeout [ 172.982813][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.990205][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.016493][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.070739][ T5576] hsr_slave_0: entered promiscuous mode [ 173.079359][ T5576] hsr_slave_1: entered promiscuous mode [ 173.162803][ T5584] hsr_slave_0: entered promiscuous mode [ 173.171157][ T5584] hsr_slave_1: entered promiscuous mode [ 173.178963][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 173.184867][ T5584] Cannot create hsr debugfs directory [ 173.255877][ T5591] hsr_slave_0: entered promiscuous mode [ 173.265408][ T5591] hsr_slave_1: entered promiscuous mode [ 173.273979][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 173.279832][ T5591] Cannot create hsr debugfs directory [ 173.366825][ T5589] hsr_slave_0: entered promiscuous mode [ 173.375648][ T5589] hsr_slave_1: entered promiscuous mode [ 173.382929][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 173.389037][ T5589] Cannot create hsr debugfs directory [ 173.470477][ T5580] hsr_slave_0: entered promiscuous mode [ 173.478652][ T5580] hsr_slave_1: entered promiscuous mode [ 173.486835][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 173.492649][ T5580] Cannot create hsr debugfs directory [ 174.513417][ T5587] Bluetooth: hci0: command tx timeout [ 174.614091][ T5576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.640811][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.651570][ T5576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.668748][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.680039][ T5576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.698255][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.722739][ T5576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.738269][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.753843][ T5587] Bluetooth: hci1: command tx timeout [ 174.829190][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.845651][ T5587] Bluetooth: hci2: command tx timeout [ 174.865772][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.878873][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.894927][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.905190][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.914939][ T5587] Bluetooth: hci3: command tx timeout [ 174.926909][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.936601][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.955012][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.993517][ T5587] Bluetooth: hci4: command tx timeout [ 175.157161][ T5591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.176014][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.186164][ T5591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.205196][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.224440][ T5591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.241812][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.289074][ T5591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.306653][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.496695][ T5580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.513488][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.539455][ T5580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.558022][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.593104][ T5580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.611311][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.652128][ T5580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.674849][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.808662][ T5589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.828553][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.837991][ T5589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.854152][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.892702][ T5589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.913899][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.937343][ T5589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.955170][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.111687][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.259881][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.368778][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.415157][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.422472][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.477638][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.499890][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.507233][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.607259][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.614780][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.679105][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.702473][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.709840][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.808056][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.885867][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.009392][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.016752][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.035790][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.091595][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.108711][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.116068][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.189426][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.196960][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.290235][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.297798][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.481294][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.635945][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.643501][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.731170][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.738711][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.711859][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.914892][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.429594][ T5576] veth0_vlan: entered promiscuous mode [ 180.599656][ T5576] veth1_vlan: entered promiscuous mode [ 181.166653][ T5576] veth0_macvtap: entered promiscuous mode [ 181.194497][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.240444][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.266228][ T5576] veth1_macvtap: entered promiscuous mode [ 181.508022][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.583904][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.632098][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.721985][ T140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.731426][ T140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.768231][ T140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.777620][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.852724][ T5591] veth0_vlan: entered promiscuous mode [ 181.896615][ T5580] veth0_vlan: entered promiscuous mode [ 182.030691][ T5591] veth1_vlan: entered promiscuous mode [ 182.100675][ T5580] veth1_vlan: entered promiscuous mode [ 182.179221][ T5584] veth0_vlan: entered promiscuous mode [ 182.370236][ T5584] veth1_vlan: entered promiscuous mode [ 182.390401][ T5589] veth0_vlan: entered promiscuous mode [ 182.550437][ T5589] veth1_vlan: entered promiscuous mode [ 182.590491][ T5591] veth0_macvtap: entered promiscuous mode [ 182.702776][ T5580] veth0_macvtap: entered promiscuous mode [ 182.746095][ T5591] veth1_macvtap: entered promiscuous mode [ 182.819257][ T5580] veth1_macvtap: entered promiscuous mode [ 182.956320][ T5584] veth0_macvtap: entered promiscuous mode [ 183.027522][ T5584] veth1_macvtap: entered promiscuous mode [ 183.049315][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.106180][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.168545][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.219961][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.269053][ T5589] veth0_macvtap: entered promiscuous mode [ 183.309505][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.330981][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.371413][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.398831][ T5589] veth1_macvtap: entered promiscuous mode [ 183.420302][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.442202][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.456808][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.501837][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.517121][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.570749][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.594159][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.738388][ T1026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.779997][ T1026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.851732][ T1026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.879148][ T1026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.981245][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.131976][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.347046][ T1329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.386486][ T1329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.425543][ T1329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.462747][ T1329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.665557][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.712340][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.927520][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.968359][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.440513][ T5576] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 188.969483][ T5834] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 189.656213][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.690467][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.138446][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.172267][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.418800][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.446343][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.185807][ T5855] netlink: 'syz.0.7': attribute type 58 has an invalid length. [ 191.193774][ T5855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7'. [ 191.386492][ T5852] ceph: No mds server is up or the cluster is laggy [ 191.696392][ T805] libceph: connect (1)[c::]:6789 error -101 [ 191.702758][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 191.736355][ T5707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.768267][ T5707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.045294][ T5859] syzkaller0: entered promiscuous mode [ 193.066540][ T5859] syzkaller0: entered allmulticast mode [ 193.087837][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.138052][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.504633][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.538111][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.682167][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.718328][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.978764][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.043231][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.708548][ T5892] 9pnet_virtio: no channels available for device syz [ 198.457111][ T5903] /dev/nullb0: Can't open blockdev [ 198.572241][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 199.783692][ T9] usb 4-1: device descriptor read/all, error -71 [ 200.283310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.316126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 200.385386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 200.694392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 200.795524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.513346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 201.614631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.717431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 202.433661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 202.536437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 204.104355][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.139594][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.227051][ T5929] 9pnet_virtio: no channels available for device syz [ 207.837345][ T5938] netlink: 'syz.3.22': attribute type 7 has an invalid length. [ 207.896293][ T5938] Unsupported ieee802154 address type: 0 [ 208.833415][ T5676] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 209.015859][ T5676] usb 2-1: Using ep0 maxpacket: 32 [ 209.038346][ T29] audit: type=1326 audit(1777792280.197:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.0.25" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f00c code=0x0 [ 209.059800][ T5676] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 209.152229][ T5676] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 209.179977][ T5587] block nbd0: Receive control failed (result -32) [ 209.209361][ T5942] block nbd0: shutting down sockets [ 209.227860][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 209.249804][ T5676] usb 2-1: Product: syz [ 209.263697][ T5676] usb 2-1: Manufacturer: syz [ 209.272450][ T5676] usb 2-1: SerialNumber: syz [ 209.507940][ T5953] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 209.640485][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 210.067492][ T5676] usb 2-1: config 0 descriptor?? [ 210.075611][ T5940] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 210.405842][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 210.440613][ T5676] usb 2-1: USB disconnect, device number 2 [ 210.884557][ T9] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 211.001268][ T5964] Can't find a SQUASHFS superblock on nullb0 [ 211.465589][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 211.628381][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.989760][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.168682][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.187442][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 212.311330][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 212.324962][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 212.350221][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.397670][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.419866][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 212.462729][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 212.477690][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 212.533077][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.596300][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.662136][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 212.728517][ T9] usb 4-1: string descriptor 0 read error: -22 [ 212.746453][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 212.760004][ T5969] loop1: detected capacity change from 0 to 512 [ 212.780553][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.993878][ T5976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.33'. [ 213.025971][ T5976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.33'. [ 213.041964][ T5976] Zero length message leads to an empty skb [ 213.119278][ T5976] input: syz1 as /devices/virtual/input/input5 [ 214.330353][ T5969] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.34: inode has both inline data and extents flags [ 214.656789][ T9] usb 4-1: can't set config #168, error -71 [ 214.671139][ T5969] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 214.673248][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 214.689261][ C0] EXT4-fs (loop1): initial error at time 1777792285: ext4_orphan_get:1397: inode 15 [ 214.698877][ C0] EXT4-fs (loop1): last error at time 1777792285: ext4_orphan_get:1397: inode 15 [ 214.722150][ T5969] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.34: couldn't read orphan inode 15 (err -117) [ 214.746584][ T9] usb 4-1: USB disconnect, device number 4 [ 214.756010][ T5969] loop1: lost filesystem error report for type 5 error -117 [ 214.759148][ T5969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.089119][ T29] audit: type=1804 audit(1777792286.247:3): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.34" name="/newroot/4/bus/bus" dev="loop1" ino=19 res=1 errno=0 [ 216.145478][ T5589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.165630][ T5996] 9pnet_virtio: no channels available for device syz [ 219.504061][ T6009] fuse: Unknown parameter 'fd0x0000000000000007' [ 221.294484][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 221.503624][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 221.542396][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.591411][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.639132][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.666560][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.716207][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.762796][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.810134][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.855839][ T9] usb 3-1: Manufacturer: syz [ 221.896733][ T9] usb 3-1: config 0 descriptor?? [ 222.073791][ T5676] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 222.289835][ T5676] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.318766][ T5676] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 222.331346][ T5676] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.359794][ T5676] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 222.390768][ T5676] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 222.416259][ T6021] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 222.460178][ T5676] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.494343][ T5676] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 222.556413][ T5676] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.625001][ T5676] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 222.661893][ T5676] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 222.679152][ T9] rc_core: IR keymap rc-hauppauge not found [ 222.697565][ T9] Registered IR keymap rc-empty [ 222.724767][ T5676] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.735183][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.751507][ T5676] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 222.769318][ T5676] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.787619][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 222.802439][ T5676] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 222.822745][ T5676] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 222.835798][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 222.885212][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 222.902189][ T5676] usb 2-1: string descriptor 0 read error: -22 [ 222.928670][ T5676] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 222.946779][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.976815][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.055116][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.072954][ T5676] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 223.113625][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.180042][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.255126][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.316554][ T5676] usb 2-1: USB disconnect, device number 3 [ 223.338726][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.427023][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.486784][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.554471][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.595075][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.640385][ T6026] loop3: detected capacity change from 0 to 512 [ 223.649374][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 223.687505][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 223.873803][ T6026] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.50: inode has both inline data and extents flags [ 224.074453][ T6026] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.083310][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 224.099398][ C1] EXT4-fs (loop3): initial error at time 1777792295: ext4_orphan_get:1397: inode 15 [ 224.109217][ C1] EXT4-fs (loop3): last error at time 1777792295: ext4_orphan_get:1397: inode 15 [ 224.200669][ T6026] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.50: couldn't read orphan inode 15 (err -117) [ 224.430419][ T6026] loop3: lost filesystem error report for type 5 error -117 [ 224.513576][ T9] usb 3-1: USB disconnect, device number 2 [ 224.530767][ T6026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.628734][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.637364][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.666101][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 225.699650][ T5591] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.870035][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.939344][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 225.994159][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.036314][ T9] usb 5-1: config 0 descriptor?? [ 226.463899][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 226.514901][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 226.516595][ T6046] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.55'. [ 226.559722][ T9] usb 5-1: USB disconnect, device number 2 [ 227.025622][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 227.216568][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 227.255397][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.280946][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 227.291363][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.337165][ T9] usb 5-1: config 0 descriptor?? [ 227.375631][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 227.459864][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 227.570833][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.600270][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.869014][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.899157][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.121251][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.140554][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.219269][ T9] usb 5-1: USB disconnect, device number 3 [ 228.302291][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 229.919173][ T9] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 230.513409][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 230.523943][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.536711][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.538624][ T6074] loop1: detected capacity change from 0 to 512 [ 230.550023][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 230.571391][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 230.625836][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 230.634474][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.643512][ T5208] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 230.647222][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.681914][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 230.740705][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 230.792471][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 230.807586][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.827380][ T6074] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.66: inode has both inline data and extents flags [ 230.859466][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.877924][ T6074] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 230.879024][ T6074] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.66: couldn't read orphan inode 15 (err -117) [ 230.888649][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 230.888702][ C0] EXT4-fs (loop1): initial error at time 1777792302: ext4_orphan_get:1397: inode 15 [ 230.888795][ C0] EXT4-fs (loop1): last error at time 1777792302: ext4_orphan_get:1397: inode 15 [ 230.958475][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 231.007507][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 231.010169][ T6074] loop1: lost filesystem error report for type 5 error -117 [ 231.031201][ T5208] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 231.048081][ T5208] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.061297][ T5208] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.085354][ T9] usb 3-1: string descriptor 0 read error: -22 [ 231.086560][ T5208] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 231.113822][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 231.115800][ T5208] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 231.135759][ T6074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.168161][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.183360][ T5208] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 231.213733][ T5208] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.226517][ T5208] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.240480][ T5208] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 231.352969][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 231.374786][ T5208] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 231.446685][ T5208] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 231.471890][ T5208] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.537994][ T5208] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.590051][ T5208] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 231.606727][ T6065] netlink: 'syz.2.63': attribute type 64 has an invalid length. [ 231.640159][ T5208] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 231.641477][ T6065] netlink: 5 bytes leftover after parsing attributes in process `syz.2.63'. [ 231.708317][ T5208] usb 5-1: string descriptor 0 read error: -22 [ 231.738523][ T5208] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 231.771706][ T5208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.917918][ T5589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.963669][ T5208] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 232.237788][ T9] usb 5-1: USB disconnect, device number 4 [ 232.404203][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 232.489742][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.499997][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.109789][ T6085] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.68'. [ 233.272793][ T10] usb 3-1: USB disconnect, device number 3 [ 233.979859][ T6093] program syz.2.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.272377][ T4871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.283568][ T4871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.300856][ T4871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.321139][ T4871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.342774][ T4871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.010240][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 237.037117][ T6110] loop2: detected capacity change from 0 to 512 [ 237.187750][ T6110] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.78: inode has both inline data and extents flags [ 237.298686][ T6110] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 237.303579][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 237.319874][ C0] EXT4-fs (loop2): initial error at time 1777792308: ext4_orphan_get:1397: inode 15 [ 237.329535][ C0] EXT4-fs (loop2): last error at time 1777792308: ext4_orphan_get:1397: inode 15 [ 237.341975][ T6110] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.78: couldn't read orphan inode 15 (err -117) [ 237.365025][ T6110] loop2: lost filesystem error report for type 5 error -117 [ 237.393571][ T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 237.415893][ T6110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.641212][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 237.674458][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.715734][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.775863][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.834447][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 237.900059][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 237.921358][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.949859][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.032578][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.104147][ T9] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 238.122089][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.207938][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 238.211437][ T6124] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.83'. [ 238.243591][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 238.314420][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 238.327860][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.344503][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 238.360347][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.379790][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.407339][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.426730][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.439187][ T5587] Bluetooth: hci5: command tx timeout [ 238.467213][ T10] usb 2-1: string descriptor 0 read error: -22 [ 238.479381][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.491207][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 238.502330][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.527602][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 238.542249][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.552314][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 238.614600][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.651894][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 238.667105][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.735544][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.803045][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 238.840925][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 238.865136][ T10] usb 2-1: USB disconnect, device number 4 [ 238.924979][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.006227][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.082356][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 239.212136][ T9] usb 5-1: string descriptor 0 read error: -22 [ 239.243648][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 239.279940][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.431378][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 239.646942][ T6121] netlink: 'syz.4.82': attribute type 64 has an invalid length. [ 239.684274][ T6121] netlink: 5 bytes leftover after parsing attributes in process `syz.4.82'. [ 239.759731][ T5208] usb 5-1: USB disconnect, device number 5 [ 240.544216][ T5587] Bluetooth: hci5: command tx timeout [ 242.603602][ T5587] Bluetooth: hci5: command tx timeout [ 244.677779][ T5587] Bluetooth: hci5: command tx timeout [ 245.723526][ T29] audit: type=1326 audit(1777792316.877:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.4.90" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6800c code=0x7ffc0000 [ 245.932029][ T29] audit: type=1326 audit(1777792316.897:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.4.90" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6800c code=0x7ffc0000 [ 246.077241][ T6165] loop2: detected capacity change from 0 to 512 [ 246.202566][ T6165] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.93: inode has both inline data and extents flags [ 246.223905][ T6165] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.234586][ T6165] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.93: couldn't read orphan inode 15 (err -117) [ 246.244386][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 246.244546][ C1] EXT4-fs (loop2): initial error at time 1777792317: ext4_orphan_get:1397: inode 15 [ 246.244696][ C1] EXT4-fs (loop2): last error at time 1777792317: ext4_orphan_get:1397: inode 15 [ 246.388479][ T6165] loop2: lost filesystem error report for type 5 error -117 [ 246.392464][ T6165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.907203][ T6172] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.94'. [ 247.186610][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.944790][ T6182] syzkaller0: entered promiscuous mode [ 248.046307][ T6182] syzkaller0: entered allmulticast mode [ 248.573407][ T5208] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 248.795118][ T9] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 248.809755][ T5208] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 248.842827][ T5208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 248.868023][ T5208] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.888819][ T5208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.954894][ T5208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 248.998796][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 249.036235][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.036257][ T5208] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 249.036387][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.147607][ T5208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.155854][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.242723][ T5208] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.245173][ T1026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.276197][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.339737][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 249.358484][ T5208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.367661][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.438418][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.493791][ T5208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.514833][ T1026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.530681][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.586845][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.587331][ T5208] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 249.679517][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 249.713393][ T5208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.744562][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.769617][ T5208] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.787866][ T1026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.818513][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.857326][ T5208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.874011][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.914128][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.921474][ T5208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.993272][ T5208] usb 3-1: string descriptor 0 read error: -22 [ 250.012598][ T9] usb 4-1: string descriptor 0 read error: -22 [ 250.025325][ T5208] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 250.056909][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 250.061991][ T5208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.078041][ T1026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.091733][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.803839][ T6188] netlink: 'syz.3.97': attribute type 64 has an invalid length. [ 250.928336][ T6188] netlink: 5 bytes leftover after parsing attributes in process `syz.3.97'. [ 252.328681][ T5208] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 252.360714][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 252.990428][ T5208] usb 3-1: USB disconnect, device number 4 [ 253.244578][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.286890][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.340838][ T6104] bridge_slave_0: entered allmulticast mode [ 253.398130][ T6104] bridge_slave_0: entered promiscuous mode [ 253.493611][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.534212][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.548527][ T9] usb 4-1: USB disconnect, device number 5 [ 253.559798][ T6104] bridge_slave_1: entered allmulticast mode [ 253.606214][ T6104] bridge_slave_1: entered promiscuous mode [ 253.924586][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.089308][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.574322][ T6218] netlink: 'syz.4.106': attribute type 13 has an invalid length. [ 254.588922][ T6217] loop2: detected capacity change from 0 to 512 [ 255.214855][ T6217] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.105: inode has both inline data and extents flags [ 255.304422][ T6217] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.305200][ T6217] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.105: couldn't read orphan inode 15 (err -117) [ 255.315042][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 255.315126][ C1] EXT4-fs (loop2): initial error at time 1777792326: ext4_orphan_get:1397: inode 15 [ 255.315287][ C1] EXT4-fs (loop2): last error at time 1777792326: ext4_orphan_get:1397: inode 15 [ 255.590602][ T6217] loop2: lost filesystem error report for type 5 error -117 [ 255.598573][ T6217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.712209][ T6227] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.107'. [ 256.765758][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.835933][ T6104] team0: Port device team_slave_0 added [ 256.959521][ T6104] team0: Port device team_slave_1 added [ 260.668619][ T6233] block nbd0: server does not support multiple connections per device. [ 260.683913][ T6233] block nbd0: shutting down sockets [ 275.997616][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.004641][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.637283][ T1026] bridge_slave_1: left allmulticast mode [ 279.667649][ T1026] bridge_slave_1: left promiscuous mode [ 279.684051][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.759845][ T1026] bridge_slave_0: left allmulticast mode [ 279.786695][ T1026] bridge_slave_0: left promiscuous mode [ 279.811249][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.922675][ T4871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.937142][ T4871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.946494][ T4871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.969758][ T4871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.998384][ T4871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.162427][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.228557][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.304948][ T1026] bond0 (unregistering): Released all slaves [ 281.409393][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.454987][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.502608][ T5587] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.517165][ T5587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.526583][ T5587] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.540879][ T5587] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.557521][ T5587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.569832][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.619841][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.628073][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.654531][ T6104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.057406][ T5587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.086464][ T5587] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.107863][ T5587] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.129766][ T5587] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.160530][ T5587] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.450558][ T4871] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 282.466157][ T4871] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 282.480007][ T4871] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 282.505416][ T4871] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 282.521599][ T4871] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 283.041513][ T6104] hsr_slave_0: entered promiscuous mode [ 283.091477][ T5587] Bluetooth: hci0: command tx timeout [ 283.112506][ T6104] hsr_slave_1: entered promiscuous mode [ 283.180755][ T6104] debugfs: 'hsr0' already exists in 'hsr' [ 283.249117][ T6104] Cannot create hsr debugfs directory [ 283.637801][ T5587] Bluetooth: hci6: command tx timeout [ 284.057548][ T1026] hsr_slave_0: left promiscuous mode [ 284.109823][ T1026] hsr_slave_1: left promiscuous mode [ 284.156506][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.190836][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.273619][ T5587] Bluetooth: hci7: command tx timeout [ 284.282517][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.301103][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.356304][ T1026] veth1_macvtap: left promiscuous mode [ 284.383826][ T1026] veth0_macvtap: left promiscuous mode [ 284.405322][ T1026] veth1_vlan: left promiscuous mode [ 284.442070][ T1026] veth0_vlan: left promiscuous mode [ 284.593867][ T5587] Bluetooth: hci8: command tx timeout [ 285.153413][ T5587] Bluetooth: hci0: command tx timeout [ 285.713651][ T5587] Bluetooth: hci6: command tx timeout [ 285.893787][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 285.951803][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 286.353715][ T5587] Bluetooth: hci7: command tx timeout [ 286.673705][ T5587] Bluetooth: hci8: command tx timeout [ 286.996416][ T5225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 287.233346][ T5587] Bluetooth: hci0: command tx timeout [ 287.614041][ T1026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.793354][ T5587] Bluetooth: hci6: command tx timeout [ 287.816187][ T1026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.980318][ T1026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.219426][ T1026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.434003][ T5587] Bluetooth: hci7: command tx timeout [ 288.757512][ T5587] Bluetooth: hci8: command tx timeout [ 289.070691][ T5225] 8021q: adding VLAN 0 to HW filter on device eth2 [ 289.275556][ T6104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 289.297494][ T6104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.307709][ T6104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 289.323681][ T5587] Bluetooth: hci0: command tx timeout [ 289.329590][ T6104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.347450][ T1026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.409797][ T6104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 289.440570][ T6104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 289.452194][ T6104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 289.476985][ T6104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 289.569209][ T1026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.743554][ T1026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.873365][ T5587] Bluetooth: hci6: command tx timeout [ 290.054607][ T1026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.513399][ T5587] Bluetooth: hci7: command tx timeout [ 290.833572][ T5587] Bluetooth: hci8: command tx timeout [ 291.262820][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.286415][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.301118][ T6244] bridge_slave_0: entered allmulticast mode [ 291.325862][ T6244] bridge_slave_0: entered promiscuous mode [ 291.532713][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.540734][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.549994][ T6244] bridge_slave_1: entered allmulticast mode [ 291.560583][ T6244] bridge_slave_1: entered promiscuous mode [ 291.612431][ T1026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.833650][ T1026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.905997][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.916323][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.934408][ T6248] bridge_slave_0: entered allmulticast mode [ 291.945052][ T6248] bridge_slave_0: entered promiscuous mode [ 292.037043][ T1026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.110215][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.120018][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.128927][ T6248] bridge_slave_1: entered allmulticast mode [ 292.148866][ T6248] bridge_slave_1: entered promiscuous mode [ 292.176339][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.252116][ T1026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.281666][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.295888][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.306483][ T6252] bridge_slave_0: entered allmulticast mode [ 292.315826][ T6252] bridge_slave_0: entered promiscuous mode [ 292.369015][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.413473][ T5225] 8021q: adding VLAN 0 to HW filter on device eth3 [ 292.423617][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.431161][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.445547][ T6252] bridge_slave_1: entered allmulticast mode [ 292.454142][ T6252] bridge_slave_1: entered promiscuous mode [ 292.517060][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.524817][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.532579][ T6258] bridge_slave_0: entered allmulticast mode [ 292.541527][ T6258] bridge_slave_0: entered promiscuous mode [ 292.598047][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.634049][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.641539][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.652766][ T6258] bridge_slave_1: entered allmulticast mode [ 292.661318][ T6258] bridge_slave_1: entered promiscuous mode [ 292.735971][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.761710][ T6244] team0: Port device team_slave_0 added [ 292.778875][ T6244] team0: Port device team_slave_1 added [ 292.848188][ T6252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.928848][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.975836][ T6252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.032203][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.039708][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.068451][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.088637][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.163288][ T6248] team0: Port device team_slave_0 added [ 293.179816][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.187435][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.214822][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.310278][ T6248] team0: Port device team_slave_1 added [ 293.374519][ T6258] team0: Port device team_slave_0 added [ 293.388920][ T6252] team0: Port device team_slave_0 added [ 293.452763][ T6258] team0: Port device team_slave_1 added [ 293.504049][ T6252] team0: Port device team_slave_1 added [ 293.511977][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.522453][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.549048][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.657123][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.664282][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.695581][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.761499][ T1026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.787724][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.795103][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.827694][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.855569][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.862736][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.896191][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.072768][ T1026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.163662][ T4871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.174294][ T4871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.190723][ T4871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.208848][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.216437][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.248816][ T4871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.250055][ T6252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.270911][ T4871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.324207][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.335490][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.363440][ T6252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.449105][ T6244] hsr_slave_0: entered promiscuous mode [ 294.469120][ T6244] hsr_slave_1: entered promiscuous mode [ 294.543565][ T1026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.735558][ T1026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.971617][ T6248] hsr_slave_0: entered promiscuous mode [ 294.990457][ T6248] hsr_slave_1: entered promiscuous mode [ 295.011448][ T6248] debugfs: 'hsr0' already exists in 'hsr' [ 295.017982][ T6248] Cannot create hsr debugfs directory [ 295.298174][ T6258] hsr_slave_0: entered promiscuous mode [ 295.311524][ T6258] hsr_slave_1: entered promiscuous mode [ 295.321141][ T6258] debugfs: 'hsr0' already exists in 'hsr' [ 295.327862][ T6258] Cannot create hsr debugfs directory [ 295.498137][ T6252] hsr_slave_0: entered promiscuous mode [ 295.521968][ T6252] hsr_slave_1: entered promiscuous mode [ 295.530832][ T6252] debugfs: 'hsr0' already exists in 'hsr' [ 295.537420][ T6252] Cannot create hsr debugfs directory [ 296.358400][ T4871] Bluetooth: hci1: command tx timeout [ 296.374256][ T1026] bridge_slave_1: left allmulticast mode [ 296.380093][ T1026] bridge_slave_1: left promiscuous mode [ 296.386982][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.397155][ T1026] bridge_slave_0: left allmulticast mode [ 296.402881][ T1026] bridge_slave_0: left promiscuous mode [ 296.409592][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.421772][ T1026] bridge_slave_1: left allmulticast mode [ 296.427921][ T1026] bridge_slave_1: left promiscuous mode [ 296.442450][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.456033][ T1026] bridge_slave_0: left allmulticast mode [ 296.461962][ T1026] bridge_slave_0: left promiscuous mode [ 296.468606][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.484592][ T1026] bridge_slave_1: left allmulticast mode [ 296.490315][ T1026] bridge_slave_1: left promiscuous mode [ 296.497109][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.508546][ T1026] bridge_slave_0: left allmulticast mode [ 296.515930][ T1026] bridge_slave_0: left promiscuous mode [ 296.522475][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.541940][ T1026] bridge_slave_1: left allmulticast mode [ 296.547818][ T1026] bridge_slave_1: left promiscuous mode [ 296.554407][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.567282][ T1026] bridge_slave_0: left allmulticast mode [ 296.573020][ T1026] bridge_slave_0: left promiscuous mode [ 296.581356][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.179255][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.193593][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.207424][ T1026] bond0 (unregistering): Released all slaves [ 297.398949][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.414085][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.426771][ T1026] bond0 (unregistering): Released all slaves [ 297.582795][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.600371][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.612727][ T1026] bond0 (unregistering): Released all slaves [ 297.796623][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.811423][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.826337][ T1026] bond0 (unregistering): Released all slaves [ 298.132645][ T1026] IPVS: stopping master sync thread 5953 ... [ 298.433380][ T4871] Bluetooth: hci1: command tx timeout [ 298.448983][ T6244] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.489387][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.499068][ T6244] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.518383][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.565748][ T6244] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 298.599669][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.609607][ T6244] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.628060][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.268409][ T6248] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 299.291806][ T6248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.389816][ T6248] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 299.421017][ T6248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.431183][ T6248] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 299.454174][ T6248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.573533][ T6248] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 299.598101][ T6248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.036190][ T1026] hsr_slave_0: left promiscuous mode [ 300.049916][ T1026] hsr_slave_1: left promiscuous mode [ 300.065956][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.084233][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.106638][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.116529][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.139654][ T1026] hsr_slave_0: left promiscuous mode [ 300.151529][ T1026] hsr_slave_1: left promiscuous mode [ 300.159871][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.176163][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.187948][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.196598][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.228179][ T1026] hsr_slave_0: left promiscuous mode [ 300.236514][ T1026] hsr_slave_1: left promiscuous mode [ 300.252339][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.261912][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.286871][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.295419][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.318332][ T1026] hsr_slave_0: left promiscuous mode [ 300.327681][ T1026] hsr_slave_1: left promiscuous mode [ 300.337883][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.345765][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.363570][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.371152][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.440828][ T1026] veth1_macvtap: left promiscuous mode [ 300.446948][ T1026] veth0_macvtap: left promiscuous mode [ 300.452832][ T1026] veth1_vlan: left promiscuous mode [ 300.460624][ T1026] veth0_vlan: left promiscuous mode [ 300.467416][ T1026] veth1_macvtap: left promiscuous mode [ 300.472980][ T1026] veth0_macvtap: left promiscuous mode [ 300.479918][ T1026] veth1_vlan: left promiscuous mode [ 300.485429][ T1026] veth0_vlan: left promiscuous mode [ 300.491982][ T1026] veth1_macvtap: left promiscuous mode [ 300.497822][ T1026] veth0_macvtap: left promiscuous mode [ 300.503905][ T1026] veth1_vlan: left promiscuous mode [ 300.509316][ T1026] veth0_vlan: left promiscuous mode [ 300.519123][ T1026] veth1_macvtap: left promiscuous mode [ 300.525575][ T4871] Bluetooth: hci1: command tx timeout [ 300.527318][ T1026] veth0_macvtap: left promiscuous mode [ 300.537324][ T1026] veth1_vlan: left promiscuous mode [ 300.542721][ T1026] veth0_vlan: left promiscuous mode [ 301.568164][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 301.588760][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 302.028576][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 302.050313][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 302.491169][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 302.538006][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 302.594206][ T4871] Bluetooth: hci1: command tx timeout [ 302.929675][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 302.956226][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 303.302237][ T6258] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 303.327470][ T6258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.340568][ T5225] 8021q: adding VLAN 0 to HW filter on device eth4 [ 303.376059][ T6258] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 303.409347][ T6258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.419644][ T6258] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 303.451283][ T6258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.535409][ T6258] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 303.568215][ T6258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.842762][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.850689][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.859055][ T6356] bridge_slave_0: entered allmulticast mode [ 303.867329][ T6356] bridge_slave_0: entered promiscuous mode [ 303.930060][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.938936][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.948085][ T6356] bridge_slave_1: entered allmulticast mode [ 303.964042][ T6356] bridge_slave_1: entered promiscuous mode [ 304.156558][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.182378][ T6252] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 304.212686][ T6252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.240165][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.316291][ T6252] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 304.334959][ T6252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.419784][ T6252] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 304.441394][ T6252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.462926][ T6356] team0: Port device team_slave_0 added [ 304.489665][ T6252] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 304.506288][ T6252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.537015][ T6356] team0: Port device team_slave_1 added [ 304.672211][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.713396][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.722239][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.748983][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.795706][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.802821][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.829758][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.146193][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.270369][ T6356] hsr_slave_0: entered promiscuous mode [ 305.296944][ T6356] hsr_slave_1: entered promiscuous mode [ 305.306417][ T6356] debugfs: 'hsr0' already exists in 'hsr' [ 305.312343][ T6356] Cannot create hsr debugfs directory [ 305.432407][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.439975][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.639943][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.647494][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.833874][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.340697][ T5225] 8021q: adding VLAN 0 to HW filter on device eth5 [ 306.454210][ T6248] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.482661][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.510640][ T1026] bridge_slave_1: left allmulticast mode [ 306.517018][ T1026] bridge_slave_1: left promiscuous mode [ 306.523392][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.536985][ T1026] bridge_slave_0: left allmulticast mode [ 306.542806][ T1026] bridge_slave_0: left promiscuous mode [ 306.549519][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.756254][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.770090][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.784364][ T1026] bond0 (unregistering): Released all slaves [ 306.860213][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.867710][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.980608][ T1026] hsr_slave_0: left promiscuous mode [ 306.991484][ T1026] hsr_slave_1: left promiscuous mode [ 307.004724][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.013478][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.205911][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 307.267499][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 307.519622][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.527171][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.647140][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.736363][ T6252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.828667][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.836182][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.031052][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.038569][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.165245][ T6252] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.221845][ T6356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 308.244545][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.269951][ T6356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.287629][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.318407][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.325809][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.348979][ T6356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.374845][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.401614][ T6356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.455235][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.559035][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.566576][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.156250][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.267339][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.500179][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.645745][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.653359][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.797554][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.805120][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.709102][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.154490][ T5225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 312.730395][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.094794][ T6244] veth0_vlan: entered promiscuous mode [ 313.260980][ T6244] veth1_vlan: entered promiscuous mode [ 313.485281][ T6252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.921392][ T6244] veth0_macvtap: entered promiscuous mode [ 314.021743][ T6244] veth1_macvtap: entered promiscuous mode [ 314.337304][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.504742][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.747937][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.763927][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.802519][ T6248] veth0_vlan: entered promiscuous mode [ 314.834976][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.848729][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.112132][ T6248] veth1_vlan: entered promiscuous mode [ 315.318314][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.550289][ T6258] veth0_vlan: entered promiscuous mode [ 315.754057][ T6258] veth1_vlan: entered promiscuous mode [ 315.909313][ T6248] veth0_macvtap: entered promiscuous mode [ 316.076967][ T6248] veth1_macvtap: entered promiscuous mode [ 316.257306][ T5225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 316.356794][ T6252] veth0_vlan: entered promiscuous mode [ 316.507973][ T6258] veth0_macvtap: entered promiscuous mode [ 316.601589][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.687271][ T6258] veth1_macvtap: entered promiscuous mode [ 316.714364][ T6252] veth1_vlan: entered promiscuous mode [ 316.740610][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.877310][ T5707] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.901043][ T5707] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.949400][ T5707] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.983839][ T5707] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.148561][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.296617][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.502135][ T6252] veth0_macvtap: entered promiscuous mode [ 317.545333][ T5707] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.571874][ T5914] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.646402][ T5914] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.677251][ T1026] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.696432][ T6252] veth1_macvtap: entered promiscuous mode [ 317.769654][ T6356] veth0_vlan: entered promiscuous mode [ 317.932119][ T6356] veth1_vlan: entered promiscuous mode [ 318.021543][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.168872][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.319959][ T1339] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.344533][ T1339] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.448743][ T1339] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.486443][ T1339] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.828719][ T6356] veth0_macvtap: entered promiscuous mode [ 318.984259][ T6356] veth1_macvtap: entered promiscuous mode [ 319.468969][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.644869][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.804084][ T1026] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.860929][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.977875][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.018216][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.237421][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.290932][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.568502][ T5225] 8021q: adding VLAN 0 to HW filter on device eth8 [ 320.630272][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.685845][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.294398][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.341502][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.575104][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.609639][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.137205][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.180300][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.503856][ T5857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.541143][ T5857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.991051][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.117'. [ 325.214052][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.232920][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.671441][ T5225] 8021q: adding VLAN 0 to HW filter on device eth9 [ 325.731464][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.765497][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.919540][ T6664] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.118'. [ 325.937332][ T806] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 326.153218][ T806] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 326.199463][ T806] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 326.274773][ T806] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.325505][ T806] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 326.376485][ T806] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 326.462224][ T806] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 326.488022][ T806] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 326.560582][ T806] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.660071][ T806] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 326.741720][ T806] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 326.807998][ T806] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 326.855961][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.862542][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.891208][ T806] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 326.960218][ T806] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.018023][ T806] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.082193][ T806] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.128032][ T806] usb 10-1: string descriptor 0 read error: -22 [ 327.151170][ T806] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 327.199330][ T806] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.331423][ T806] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 327.523735][ T6659] netlink: 'syz.9.113': attribute type 64 has an invalid length. [ 327.539512][ T10] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 327.543576][ T6659] netlink: 5 bytes leftover after parsing attributes in process `syz.9.113'. [ 327.625403][ T5707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.640209][ T40] usb 10-1: USB disconnect, device number 2 [ 327.667943][ T5707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.789329][ T10] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 327.835732][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.902025][ T10] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.943395][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.006075][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.032155][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.068421][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.092515][ T10] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 328.120622][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.160125][ T10] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.217016][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.252263][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.312749][ T10] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 328.331328][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.360918][ T10] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.402482][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.453358][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.517015][ T10] usb 9-1: string descriptor 0 read error: -22 [ 328.547316][ T10] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 328.579035][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.713021][ T10] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 328.950732][ T40] usb 9-1: USB disconnect, device number 2 [ 330.138041][ T6710] syzkaller0: entered promiscuous mode [ 330.155310][ T6710] syzkaller0: entered allmulticast mode [ 330.650613][ T6697] netlink: 64 bytes leftover after parsing attributes in process `syz.9.123'. [ 331.720083][ T6726] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.129'. [ 332.674917][ T40] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 332.909742][ T40] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 332.962894][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.042397][ T40] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.116691][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.173260][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.225950][ T40] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 333.286495][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.347108][ T40] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.431923][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.482352][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.567897][ T40] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 333.603706][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.662303][ T40] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.716141][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.782034][ T40] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.837490][ T40] usb 6-1: string descriptor 0 read error: -22 [ 333.852566][ T40] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 333.870707][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.934762][ T6752] syzkaller0: entered promiscuous mode [ 333.957664][ T6752] syzkaller0: entered allmulticast mode [ 333.965044][ T10] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 334.003632][ T40] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 334.158647][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 334.188264][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 334.237381][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.289910][ T6733] netlink: 'syz.5.132': attribute type 64 has an invalid length. [ 334.308952][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.359435][ T6733] netlink: 5 bytes leftover after parsing attributes in process `syz.5.132'. [ 334.359692][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 334.458184][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 334.496609][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 334.571068][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.636586][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.676134][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 334.761547][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 334.797907][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 334.876831][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.956619][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.999736][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 335.083012][ T10] usb 8-1: string descriptor 0 read error: -22 [ 335.122223][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 335.174006][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.340039][ T10] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 335.608460][ T10] usb 8-1: USB disconnect, device number 2 [ 336.056832][ T40] usb 6-1: USB disconnect, device number 2 [ 336.706681][ T5225] 8021q: adding VLAN 0 to HW filter on device eth10 [ 336.753725][ T6783] program syz.5.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.769240][ T6782] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.144'. [ 338.806463][ T6797] syzkaller0: entered promiscuous mode [ 338.838527][ T6780] netlink: 64 bytes leftover after parsing attributes in process `syz.9.145'. [ 338.857618][ T6797] syzkaller0: entered allmulticast mode [ 341.293313][ T6831] ===================================================== [ 341.293584][ T10] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 341.300576][ T6831] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 341.317329][ T6831] mptcp_established_options+0x112f/0x3530 [ 341.323519][ T6831] tcp_established_options+0x312/0xcc0 [ 341.329224][ T6831] __tcp_transmit_skb+0x5dc/0x5fe0 [ 341.334674][ T6831] __tcp_send_ack+0x967/0xad0 [ 341.339472][ T6831] tcp_send_ack+0x3d/0x60 [ 341.344104][ T6831] mptcp_subflow_shutdown+0x164/0x690 [ 341.349714][ T6831] mptcp_check_send_data_fin+0x31b/0x3d0 [ 341.355628][ T6831] __mptcp_close+0x860/0x1360 [ 341.360450][ T6831] mptcp_close+0x42/0x260 [ 341.365080][ T6831] inet_release+0x1ee/0x2a0 [ 341.369740][ T6831] sock_close+0xd6/0x2f0 [ 341.374328][ T6831] __fput+0x60e/0x1010 [ 341.378533][ T6831] ____fput+0x25/0x30 [ 341.382642][ T6831] task_work_run+0x208/0x2b0 [ 341.391671][ T6831] exit_to_user_mode_loop+0x306/0x1b60 [ 341.398647][ T6831] __do_fast_syscall_32+0x2c7/0x460 [ 341.404232][ T6831] do_fast_syscall_32+0x37/0x80 [ 341.409308][ T6831] do_SYSENTER_32+0x1f/0x30 [ 341.414172][ T6831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.420689][ T6831] [ 341.423684][ T6831] Local variable opts created at: [ 341.428851][ T6831] __tcp_transmit_skb+0x4d/0x5fe0 [ 341.434134][ T6831] __tcp_send_ack+0x967/0xad0 [ 341.438959][ T6831] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 341.441393][ T6831] CPU: 1 UID: 0 PID: 6831 Comm: syz.5.160 Not tainted syzkaller #0 PREEMPT(full) [ 341.450903][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 341.461227][ T6831] ===================================================== [ 341.468450][ T6831] Disabling lock debugging due to kernel taint [ 341.505313][ T6831] Kernel panic - not syncing: kmsan.panic set ... [ 341.511849][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.5.160 Tainted: G B syzkaller #0 PREEMPT(full) [ 341.522780][ T6831] Tainted: [B]=BAD_PAGE [ 341.526992][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 341.537140][ T6831] Call Trace: [ 341.540491][ T6831] [ 341.543485][ T6831] __dump_stack+0x26/0x30 [ 341.547946][ T6831] dump_stack_lvl+0x50/0x1c0 [ 341.552666][ T6831] ? dump_stack+0x12/0x25 [ 341.557129][ T6831] dump_stack+0x1e/0x25 [ 341.561417][ T6831] vpanic+0x7b4/0x1430 [ 341.565647][ T6831] panic+0x15d/0x160 [ 341.569726][ T6831] kmsan_report+0x31a/0x320 [ 341.574392][ T6831] ? __msan_warning+0x1b/0x30 [ 341.579207][ T6831] ? mptcp_established_options+0x112f/0x3530 [ 341.585332][ T6831] ? tcp_established_options+0x312/0xcc0 [ 341.591130][ T6831] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 341.596537][ T6831] ? __tcp_send_ack+0x967/0xad0 [ 341.601508][ T6831] ? tcp_send_ack+0x3d/0x60 [ 341.606157][ T6831] ? mptcp_subflow_shutdown+0x164/0x690 [ 341.611843][ T6831] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 341.617795][ T6831] ? __mptcp_close+0x860/0x1360 [ 341.622784][ T6831] ? mptcp_close+0x42/0x260 [ 341.627441][ T6831] ? inet_release+0x1ee/0x2a0 [ 341.632260][ T6831] ? sock_close+0xd6/0x2f0 [ 341.636828][ T6831] ? __fput+0x60e/0x1010 [ 341.641194][ T6831] ? ____fput+0x25/0x30 [ 341.645465][ T6831] ? task_work_run+0x208/0x2b0 [ 341.650341][ T6831] ? exit_to_user_mode_loop+0x306/0x1b60 [ 341.656102][ T6831] ? __do_fast_syscall_32+0x2c7/0x460 [ 341.661628][ T6831] ? do_fast_syscall_32+0x37/0x80 [ 341.666804][ T6831] ? do_SYSENTER_32+0x1f/0x30 [ 341.671632][ T6831] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.678286][ T6831] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.684940][ T6831] ? kmsan_get_metadata+0xf1/0x160 [ 341.690213][ T6831] ? tcp_established_options+0x312/0xcc0 [ 341.696021][ T6831] ? __msan_warning+0x1b/0x30 [ 341.700847][ T6831] ? filter_irq_stacks+0x13f/0x190 [ 341.706094][ T6831] ? stack_depot_save_flags+0x35/0x790 [ 341.711723][ T6831] ? kmsan_get_metadata+0xf1/0x160 [ 341.717003][ T6831] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 341.723488][ T6831] ? kmsan_get_metadata+0xf1/0x160 [ 341.728769][ T6831] __msan_warning+0x1b/0x30 [ 341.733418][ T6831] mptcp_established_options+0x112f/0x3530 [ 341.739428][ T6831] tcp_established_options+0x312/0xcc0 [ 341.745079][ T6831] __tcp_transmit_skb+0x5dc/0x5fe0 [ 341.750329][ T6831] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 341.756659][ T6831] ? kmsan_get_metadata+0xf1/0x160 [ 341.761931][ T6831] ? kmsan_get_metadata+0xf1/0x160 [ 341.767207][ T6831] ? kmsan_get_metadata+0xf1/0x160 [ 341.772479][ T6831] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.778469][ T6831] ? __alloc_skb+0xb7d/0x1190 [ 341.783304][ T6831] __tcp_send_ack+0x967/0xad0 [ 341.788122][ T6831] tcp_send_ack+0x3d/0x60 [ 341.792600][ T6831] mptcp_subflow_shutdown+0x164/0x690 [ 341.798126][ T6831] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.804122][ T6831] mptcp_check_send_data_fin+0x31b/0x3d0 [ 341.809922][ T6831] __mptcp_close+0x860/0x1360 [ 341.814765][ T6831] ? __pfx_mptcp_close+0x10/0x10 [ 341.819861][ T6831] mptcp_close+0x42/0x260 [ 341.824347][ T6831] ? __pfx_mptcp_close+0x10/0x10 [ 341.829436][ T6831] inet_release+0x1ee/0x2a0 [ 341.834088][ T6831] ? __pfx_inet_release+0x10/0x10 [ 341.839262][ T6831] sock_close+0xd6/0x2f0 [ 341.843672][ T6831] ? __pfx_sock_close+0x10/0x10 [ 341.848676][ T6831] __fput+0x60e/0x1010 [ 341.852902][ T6831] ? __pfx_____fput+0x10/0x10 [ 341.857710][ T6831] ____fput+0x25/0x30 [ 341.861810][ T6831] task_work_run+0x208/0x2b0 [ 341.866531][ T6831] exit_to_user_mode_loop+0x306/0x1b60 [ 341.872149][ T6831] ? __ia32_sys_close_range+0x96/0xe0 [ 341.877662][ T6831] __do_fast_syscall_32+0x2c7/0x460 [ 341.883030][ T6831] do_fast_syscall_32+0x37/0x80 [ 341.888038][ T6831] do_SYSENTER_32+0x1f/0x30 [ 341.892685][ T6831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.899177][ T6831] RIP: 0023:0xf7fe700c [ 341.903348][ T6831] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 341.923089][ T6831] RSP: 002b:00000000ff89161c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 341.931637][ T6831] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 341.939692][ T6831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.947745][ T6831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.955809][ T6831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 341.963874][ T6831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.971961][ T6831] [ 341.975404][ T6831] Kernel Offset: disabled [ 341.979767][ T6831] Rebooting in 86400 seconds..