last executing test programs: 19m23.147769319s ago: executing program 4 (id=5): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) socket$kcm(0x10, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 19m10.872597207s ago: executing program 32 (id=8): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000040)=0x6) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 19m10.106736946s ago: executing program 33 (id=3): fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, r4, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r4}}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000039c0)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1d790000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000003a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r5, 0x0}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 19m5.437856573s ago: executing program 34 (id=5): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) socket$kcm(0x10, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 18m22.94541085s ago: executing program 35 (id=46): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="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"], 0x1074}, 0x1, 0x0, 0x0, 0x20000005}, 0x28800) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) read$FUSE(r5, &(0x7f0000006300)={0x2020}, 0x2020) r6 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x28555f37dd1d28c3) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) r11 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r11, 0xc0040d07, &(0x7f0000000040)=0x121) socket$nl_route(0x10, 0x3, 0x0) 18m6.651823572s ago: executing program 36 (id=54): ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 16m55.808473303s ago: executing program 5 (id=78): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m54.697197454s ago: executing program 5 (id=80): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 16m48.240202901s ago: executing program 37 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="08001efbb09a58", 0x7}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@getchain={0x4c, 0x66, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff0}, {0xb, 0x1}, {0xd, 0xf}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 16m40.687390403s ago: executing program 5 (id=91): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = dup(r0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0x0, 0x2}}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000210001800400028008000300fdffffff0e0001"], 0x68}}, 0x0) r7 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x0, 0x271}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0x0) r10 = mq_open(&(0x7f0000000400)='-s\tli\x1cqxte&\xac\xe87\x00G0\xf6\x13z\xc0\xcf\xcb\x1bb#\x05\x17\xca\x0f\xa2\xfc\x97\xf8\xda\xed\xad\xaf\xe7z\xe4.\xd4\xa6', 0x6e93ebbbcc0884f2, 0x174, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) 16m38.451653383s ago: executing program 9 (id=94): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 16m38.096968481s ago: executing program 5 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 16m37.176626261s ago: executing program 5 (id=98): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 16m36.762222822s ago: executing program 9 (id=99): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) timerfd_create(0x9, 0x80000) r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 16m32.26339651s ago: executing program 5 (id=102): socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, 0x0, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 16m21.224709515s ago: executing program 38 (id=99): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) timerfd_create(0x9, 0x80000) r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 16m20.934596357s ago: executing program 6 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 16m15.321519768s ago: executing program 39 (id=102): socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, 0x0, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 16m15.142973274s ago: executing program 6 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m12.502887618s ago: executing program 6 (id=113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000806c9661bb39d7fa44ba30f0d432db49331f43f0d1607a790e23a294e284ff77668343d1b4cb530769c108e1e4ecd7397595fde1c642057cb0940be1484ed4d103b693ca9ee5a32bcc827fc755e05557c341e43c8919b662ea930860abc39daee4c3fa3a0a24a0e436"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mount$bind(&(0x7f0000000340)='./cgroup\x00', &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400), 0x84c000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) fsopen(&(0x7f0000000440)='aio\x00', 0x1) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r3, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000009000002000000003e0013b1f39fb48c06050000000000000d4537a3d175d32afe872c20413cd9fa036729952c141b525795ca74f82d74a30b3ce1264d53329ec4fdc6585315528603b2d395af867d36a212362300"/100], 0x14}}, 0x20004000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 16m10.080281842s ago: executing program 6 (id=116): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3e8]}, 0x8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) fspick(0xffffffffffffff9c, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 16m8.117697633s ago: executing program 6 (id=118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 16m4.047094677s ago: executing program 6 (id=120): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0xffffffff, 0x6, 0x6, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0x6, 0x4, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffffc]}) 16m3.8682036s ago: executing program 8 (id=121): syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m1.178129845s ago: executing program 40 (id=120): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0xffffffff, 0x6, 0x6, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0x6, 0x4, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffffc]}) 16m1.105695986s ago: executing program 8 (id=123): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xcc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 16m0.58247546s ago: executing program 8 (id=124): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 15m59.877227298s ago: executing program 8 (id=125): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3e8]}, 0x8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) fspick(0xffffffffffffff9c, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 15m58.351290245s ago: executing program 8 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 15m56.555295738s ago: executing program 8 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 15m54.966499252s ago: executing program 41 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 15m7.3996143s ago: executing program 3 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 15m6.975259833s ago: executing program 3 (id=134): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x2c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x18}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_pidfd_open(r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 14m56.132272896s ago: executing program 3 (id=137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xcc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 14m55.662824595s ago: executing program 3 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025747a31000000000900010073797a3000000000080005400000001c"], 0xe8}, 0x1, 0x0, 0x0, 0x40c0004}, 0x0) 14m51.853768807s ago: executing program 3 (id=140): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', 0x0}) 14m46.273266351s ago: executing program 3 (id=143): socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) 14m29.320320638s ago: executing program 42 (id=143): socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) 10m2.211514994s ago: executing program 0 (id=310): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) openat$comedi(0xffffffffffffff9c, 0x0, 0x2080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 9m48.463771292s ago: executing program 0 (id=315): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 9m44.727746002s ago: executing program 0 (id=317): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, 0x0, 0xfce1) ioctl$TCFLSH(r0, 0x540b, 0x1) 9m44.37814774s ago: executing program 0 (id=318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @window={0x3, 0xb, 0x8}, @mss={0x2, 0x32}, @window={0x3, 0x5, 0x8}, @window={0x3, 0x3, 0x401}, @window, @mss={0x2, 0x10000}, @timestamp, @mss={0x2, 0x2}, @sack_perm], 0x20000000000000a8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9m38.69727934s ago: executing program 0 (id=320): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x2c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x18}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) syz_pidfd_open(r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 9m28.991896077s ago: executing program 0 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) r5 = dup(r3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r9 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2], [0x800], [0x101, 0x0, 0x0, 0x3]}) shutdown(r3, 0x1) 9m12.912237897s ago: executing program 43 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) r5 = dup(r3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r9 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2], [0x800], [0x101, 0x0, 0x0, 0x3]}) shutdown(r3, 0x1) 8.666170361s ago: executing program 7 (id=879): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.642486472s ago: executing program 1 (id=880): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0) 8.38749201s ago: executing program 2 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a000004"], 0xa8}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 6.773049326s ago: executing program 2 (id=882): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000400)='-s\tli\x1cqxte&\xac\xe87\x00G0\xf6\x13z\xc0\xcf\xcb\x1bb#\x05\x17\xca\x0f\xa2\xfc\x97\xf8\xda\xed\xad\xaf\xe7z\xe4.\xd4\xa6', 0x6e93ebbbcc0884f2, 0x174, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 6.764220388s ago: executing program 1 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) 6.462506636s ago: executing program 7 (id=884): r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet(0x2, 0xa, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, 0x0, 0x0) 6.10737907s ago: executing program 9 (id=333): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 5.604576594s ago: executing program 1 (id=885): unshare(0x60600) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x3}, 0xffffff96) 5.132807331s ago: executing program 7 (id=886): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.53617137s ago: executing program 2 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025747a31000000000900010073797a3000000000080005400000001c"], 0xe8}, 0x1, 0x0, 0x0, 0x40c0004}, 0x0) 3.842659257s ago: executing program 1 (id=888): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 2.967816593s ago: executing program 7 (id=889): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x9add, 0x4c, @remote, @local, 0x20, 0x7800, 0x8, 0xc}}) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.700143319s ago: executing program 2 (id=890): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) accept4(r1, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@empty, @dev={0xfe, 0x80, '\x00', 0x3a}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c}, 0x14}}, 0x0) 2.329262092s ago: executing program 9 (id=891): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r3 = openat$kvm(0xffffff9c, 0x0, 0x40300, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc9}}}, 0x6) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8000000000000001, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x20000c595, 0xffffffffffffbff9, 0xffffffffffffffff, 0x4, 0x0, 0x80000004000000, 0x4], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.050709564s ago: executing program 1 (id=892): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x1b) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x430601, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0xf, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)={0x1}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) pselect6(0x40, &(0x7f0000000180)={0x2, 0x9, 0x9, 0x2, 0x1c5, 0xbbf5, 0x2, 0x5}, &(0x7f00000001c0)={0x8, 0x8, 0x1, 0x1, 0x9, 0x401, 0x4, 0x7f}, &(0x7f0000000300)={0x2, 0x10, 0x2, 0x2, 0x84d, 0x1f0, 0xffffffffffffffff, 0x80}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000100)=0x9) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0xa, 0x3, 0x2}, {0x1, 0x4, 0x6, 0x8, 0x27, 0x7, 0xffb}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xfffd}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x7, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x2, 0x2, 0x0, 0xfffffff7, 0xfffffffa, 0xff, 0x6}]}) 1.085503829s ago: executing program 9 (id=893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 864.306212ms ago: executing program 7 (id=894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) 827.576566ms ago: executing program 2 (id=895): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendto$netrom(r0, 0x0, 0x0, 0x881, 0x0, 0x0) 250.05332ms ago: executing program 9 (id=896): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x0, 0x271}, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f0000000400)='-s\tli\x1cqxte&\xac\xe87\x00G0\xf6\x13z\xc0\xcf\xcb\x1bb#\x05\x17\xca\x0f\xa2\xfc\x97\xf8\xda\xed\xad\xaf\xe7z\xe4.\xd4\xa6', 0x6e93ebbbcc0884f2, 0x174, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 242.463536ms ago: executing program 1 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0xe8, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x7, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb656e53a9c4eb6de}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40488c9}, 0x4004002) 98.471928ms ago: executing program 7 (id=898): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd8", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 98.213968ms ago: executing program 4 (id=109): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x4004000}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=899): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) kernel console output (not intermixed with test programs): evsim2 netdevsim2: renamed from eth2 [ 1089.013214][ T8817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1089.473131][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.221842][ T8825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1090.374287][ T8825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1090.897052][ T7377] Bluetooth: hci1: command tx timeout [ 1091.511617][ T8825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1092.803510][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.866345][ T8825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1092.977512][ T7377] Bluetooth: hci1: command tx timeout [ 1093.523751][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.531558][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.057158][ T7377] Bluetooth: hci1: command tx timeout [ 1096.147263][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1096.166379][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1096.177506][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1096.230410][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1096.252460][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1096.558509][ T9063] chnl_net:caif_netlink_parms(): no params data found [ 1097.137056][ T5776] Bluetooth: hci1: command tx timeout [ 1098.341431][ T5776] Bluetooth: hci4: command tx timeout [ 1098.447939][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.636951][ T9012] bridge_slave_1: left allmulticast mode [ 1098.654229][ T9012] bridge_slave_1: left promiscuous mode [ 1098.688447][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.727767][ T9012] bridge_slave_0: left allmulticast mode [ 1098.748218][ T9012] bridge_slave_0: left promiscuous mode [ 1098.774898][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.442069][ T9012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.467956][ T9012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.485939][ T9012] bond0 (unregistering): Released all slaves [ 1099.557073][ T5892] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1099.752979][ T5892] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 1099.771648][ T5892] usb 2-1: config 0 has no interfaces? [ 1099.802398][ T5892] usb 2-1: config 0 has no interfaces? [ 1099.815470][ T5892] usb 2-1: config 0 has no interfaces? [ 1099.832503][ T5892] usb 2-1: config 0 has no interfaces? [ 1099.886893][ T5892] usb 2-1: config 0 has no interfaces? [ 1099.902973][ T5892] usb 2-1: config 0 has no interfaces? [ 1099.914285][ T9012] hsr_slave_0: left promiscuous mode [ 1099.921486][ T5892] usb 2-1: config 0 has no interfaces? [ 1099.927926][ T5892] usb 2-1: config 0 has no interfaces? [ 1099.949203][ T9012] hsr_slave_1: left promiscuous mode [ 1099.949740][ T5892] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1099.959212][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.986775][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.000690][ T5892] usb 2-1: Product: syz [ 1100.009688][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.016725][ T5892] usb 2-1: Manufacturer: syz [ 1100.022120][ T5892] usb 2-1: SerialNumber: syz [ 1100.040147][ T5892] usb 2-1: config 0 descriptor?? [ 1100.278948][ T5892] usb 2-1: USB disconnect, device number 21 [ 1100.417618][ T5776] Bluetooth: hci4: command tx timeout [ 1100.816077][ T9012] team0 (unregistering): Port device team_slave_1 removed [ 1100.870217][ T9012] team0 (unregistering): Port device team_slave_0 removed [ 1100.987870][ T5824] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1101.206848][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 1101.239371][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1101.291373][ T5824] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1101.326824][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1101.335400][ T5824] usb 2-1: Product: syz [ 1101.356987][ T5824] usb 2-1: Manufacturer: syz [ 1101.362317][ T5824] usb 2-1: SerialNumber: syz [ 1101.431628][ T5824] usb 2-1: config 0 descriptor?? [ 1101.658240][ T8825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.844202][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.886464][ T8595] usb 2-1: USB disconnect, device number 22 [ 1102.222840][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.236802][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.244960][ T9063] bridge_slave_0: entered allmulticast mode [ 1102.274721][ T9063] bridge_slave_0: entered promiscuous mode [ 1102.294056][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.302814][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.311923][ T9063] bridge_slave_1: entered allmulticast mode [ 1102.324207][ T9063] bridge_slave_1: entered promiscuous mode [ 1102.354595][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.362184][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.485086][ T8825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.497838][ T5776] Bluetooth: hci4: command tx timeout [ 1102.853964][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.861751][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.997577][ T9063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.054535][ T9063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.542764][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.550573][ T9015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.021843][ T9063] team0: Port device team_slave_0 added [ 1104.073095][ T9063] team0: Port device team_slave_1 added [ 1104.120329][ T9087] chnl_net:caif_netlink_parms(): no params data found [ 1104.351175][ T7377] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1104.373171][ T7377] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1104.384929][ T7377] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1104.400398][ T7377] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1104.429075][ T7377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1104.528673][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.535848][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.587166][ T5776] Bluetooth: hci4: command tx timeout [ 1104.598399][ T9063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.622345][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.631266][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.659449][ T9063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.995083][ T9063] hsr_slave_0: entered promiscuous mode [ 1106.051920][ T9063] hsr_slave_1: entered promiscuous mode [ 1106.078686][ T9063] debugfs: 'hsr0' already exists in 'hsr' [ 1106.108855][ T7377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1106.110835][ T9063] Cannot create hsr debugfs directory [ 1106.126835][ T7377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1106.136939][ T7377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1106.153725][ T7377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1106.166145][ T7377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1106.214742][ T9012] bridge_slave_1: left allmulticast mode [ 1106.249904][ T9012] bridge_slave_1: left promiscuous mode [ 1106.317820][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.391103][ T9012] bridge_slave_0: left allmulticast mode [ 1106.416859][ T9012] bridge_slave_0: left promiscuous mode [ 1106.437803][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.496908][ T5776] Bluetooth: hci5: command tx timeout [ 1107.227932][ T9012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.254079][ T9012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.279577][ T9012] bond0 (unregistering): Released all slaves [ 1108.617352][ T5776] Bluetooth: hci0: command tx timeout [ 1108.621603][ T7377] Bluetooth: hci5: command tx timeout [ 1108.868216][ T9012] hsr_slave_0: left promiscuous mode [ 1108.899641][ T9012] hsr_slave_1: left promiscuous mode [ 1108.913396][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.924407][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.681102][ T9012] team0 (unregistering): Port device team_slave_1 removed [ 1109.734212][ T9012] team0 (unregistering): Port device team_slave_0 removed [ 1110.657106][ T7377] Bluetooth: hci5: command tx timeout [ 1110.657163][ T5776] Bluetooth: hci0: command tx timeout [ 1110.867986][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.875893][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.893696][ T9087] bridge_slave_0: entered allmulticast mode [ 1110.911918][ T9087] bridge_slave_0: entered promiscuous mode [ 1110.940100][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.987450][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.995494][ T9087] bridge_slave_1: entered allmulticast mode [ 1111.072563][ T9087] bridge_slave_1: entered promiscuous mode [ 1111.575660][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.756293][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.063462][ T9087] team0: Port device team_slave_0 added [ 1112.478532][ T9087] team0: Port device team_slave_1 added [ 1112.747524][ T7377] Bluetooth: hci0: command tx timeout [ 1112.753827][ T7377] Bluetooth: hci5: command tx timeout [ 1112.845796][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 1113.339774][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.366336][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.472984][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.818282][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.825635][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.925489][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.817197][ T7377] Bluetooth: hci0: command tx timeout [ 1114.835687][ T9087] hsr_slave_0: entered promiscuous mode [ 1114.922145][ T9087] hsr_slave_1: entered promiscuous mode [ 1114.992889][ T9087] debugfs: 'hsr0' already exists in 'hsr' [ 1115.014093][ T9087] Cannot create hsr debugfs directory [ 1115.536254][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.552013][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.563813][ T9125] bridge_slave_0: entered allmulticast mode [ 1115.581796][ T9125] bridge_slave_0: entered promiscuous mode [ 1115.913672][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.960896][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.997998][ T9125] bridge_slave_1: entered allmulticast mode [ 1116.039989][ T9125] bridge_slave_1: entered promiscuous mode [ 1116.538768][ T9135] chnl_net:caif_netlink_parms(): no params data found [ 1116.607067][ T9063] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1116.759240][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.925064][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.878560][ T9063] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1118.252014][ T9063] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1118.575027][ T9063] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1118.777302][ T9125] team0: Port device team_slave_0 added [ 1118.812638][ T9125] team0: Port device team_slave_1 added [ 1119.211938][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.224908][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.255629][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.266917][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1119.290028][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.297629][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.325728][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.429549][ T24] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 1119.444334][ T24] usb 2-1: config 0 has no interfaces? [ 1119.473977][ T24] usb 2-1: config 0 has no interfaces? [ 1119.487827][ T24] usb 2-1: config 0 has no interfaces? [ 1119.500692][ T24] usb 2-1: config 0 has no interfaces? [ 1119.521315][ T24] usb 2-1: config 0 has no interfaces? [ 1119.533372][ T24] usb 2-1: config 0 has no interfaces? [ 1119.547977][ T24] usb 2-1: config 0 has no interfaces? [ 1119.560524][ T24] usb 2-1: config 0 has no interfaces? [ 1119.592134][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1119.606802][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.615852][ T24] usb 2-1: Product: syz [ 1119.624052][ T24] usb 2-1: Manufacturer: syz [ 1119.629745][ T24] usb 2-1: SerialNumber: syz [ 1119.647835][ T24] usb 2-1: config 0 descriptor?? [ 1119.745918][ T9125] hsr_slave_0: entered promiscuous mode [ 1119.764601][ T9125] hsr_slave_1: entered promiscuous mode [ 1119.774577][ T9125] debugfs: 'hsr0' already exists in 'hsr' [ 1119.784722][ T9125] Cannot create hsr debugfs directory [ 1119.811010][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.820386][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.829077][ T9135] bridge_slave_0: entered allmulticast mode [ 1119.840457][ T9135] bridge_slave_0: entered promiscuous mode [ 1119.874678][ T9056] usb 2-1: USB disconnect, device number 23 [ 1120.013985][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.023067][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.032786][ T9135] bridge_slave_1: entered allmulticast mode [ 1120.042019][ T9135] bridge_slave_1: entered promiscuous mode [ 1120.217414][ T9135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.300947][ T9135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.497816][ T9135] team0: Port device team_slave_0 added [ 1120.536889][ T9057] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1120.665669][ T9135] team0: Port device team_slave_1 added [ 1120.696945][ T9057] usb 2-1: Using ep0 maxpacket: 32 [ 1120.735034][ T9057] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1120.771789][ T9057] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1120.786284][ T9057] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1120.802580][ T9057] usb 2-1: Product: syz [ 1120.807963][ T9057] usb 2-1: Manufacturer: syz [ 1120.813293][ T9057] usb 2-1: SerialNumber: syz [ 1120.831231][ T9057] usb 2-1: config 0 descriptor?? [ 1120.970055][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.984081][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.014504][ T9135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.074736][ T9012] bridge_slave_1: left allmulticast mode [ 1121.081226][ T9012] bridge_slave_1: left promiscuous mode [ 1121.089129][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.103353][ T9012] bridge_slave_0: left allmulticast mode [ 1121.109878][ T9012] bridge_slave_0: left promiscuous mode [ 1121.116281][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.132961][ T9012] bridge_slave_1: left allmulticast mode [ 1121.143384][ T9012] bridge_slave_1: left promiscuous mode [ 1121.150678][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.162330][ T9012] bridge_slave_0: left allmulticast mode [ 1121.168529][ T9012] bridge_slave_0: left promiscuous mode [ 1121.174891][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.257563][ T9056] usb 2-1: USB disconnect, device number 24 [ 1121.643893][ T9012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.662967][ T9012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.682865][ T9012] bond0 (unregistering): Released all slaves [ 1121.889198][ T9012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.913953][ T9012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.940598][ T9012] bond0 (unregistering): Released all slaves [ 1121.970142][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.013992][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.099284][ T9135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.628765][ T9012] hsr_slave_0: left promiscuous mode [ 1122.643146][ T9012] hsr_slave_1: left promiscuous mode [ 1122.659634][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.670151][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.764400][ T9012] hsr_slave_0: left promiscuous mode [ 1122.797557][ T9012] hsr_slave_1: left promiscuous mode [ 1122.811079][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.837325][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.897013][ T9012] team0 (unregistering): Port device team_slave_1 removed [ 1123.929315][ T9012] team0 (unregistering): Port device team_slave_0 removed [ 1125.735116][ T9012] team0 (unregistering): Port device team_slave_1 removed [ 1125.778007][ T9012] team0 (unregistering): Port device team_slave_0 removed [ 1126.333241][ T9135] hsr_slave_0: entered promiscuous mode [ 1126.352525][ T9135] hsr_slave_1: entered promiscuous mode [ 1126.362995][ T9135] debugfs: 'hsr0' already exists in 'hsr' [ 1126.370462][ T9135] Cannot create hsr debugfs directory [ 1127.705714][ T9087] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1127.997073][ T9087] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1128.223874][ T9087] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1128.371257][ T9063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.508656][ T9087] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1129.424520][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.674004][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.682073][ T9015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.903196][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.910949][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.145022][ T9125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1130.373216][ T9125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1130.537185][ T9125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1130.713289][ T9125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1131.726431][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.733320][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1132.373642][ T9135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1132.559117][ T9135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1132.720714][ T9135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1132.815618][ T9135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1133.269862][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.529872][ T9188] overlayfs: failed to resolve './file1': -2 [ 1133.700386][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.010747][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.018334][ T9015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.443078][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.450929][ T9015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.747687][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.933842][ T9063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.048619][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.181678][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.190464][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.326143][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.333642][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.741477][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.147187][ T8595] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1137.202125][ T9135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.344733][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.352682][ T9019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.368215][ T8595] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 1137.404264][ T8595] usb 2-1: config 0 has no interfaces? [ 1137.445147][ T8595] usb 2-1: config 0 has no interfaces? [ 1137.488533][ T8595] usb 2-1: config 0 has no interfaces? [ 1137.516160][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.519009][ T8595] usb 2-1: config 0 has no interfaces? [ 1137.524236][ T9019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.572659][ T8595] usb 2-1: config 0 has no interfaces? [ 1137.594169][ T8595] usb 2-1: config 0 has no interfaces? [ 1137.653274][ T8595] usb 2-1: config 0 has no interfaces? [ 1137.684815][ T8595] usb 2-1: config 0 has no interfaces? [ 1137.771481][ T8595] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1137.826736][ T8595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.835022][ T8595] usb 2-1: Product: syz [ 1137.895055][ T8595] usb 2-1: Manufacturer: syz [ 1137.916778][ T8595] usb 2-1: SerialNumber: syz [ 1137.958427][ T8595] usb 2-1: config 0 descriptor?? [ 1138.244339][ T9057] usb 2-1: USB disconnect, device number 25 [ 1138.644036][ T9087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.907104][ T8595] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1139.107356][ T8595] usb 2-1: Using ep0 maxpacket: 32 [ 1139.154645][ T8595] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1139.235993][ T8595] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1139.264159][ T8595] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1139.265562][ T9063] veth0_vlan: entered promiscuous mode [ 1139.281994][ T8595] usb 2-1: Product: syz [ 1139.316429][ T8595] usb 2-1: Manufacturer: syz [ 1139.322059][ T8595] usb 2-1: SerialNumber: syz [ 1139.360065][ T8595] usb 2-1: config 0 descriptor?? [ 1139.575491][ T9063] veth1_vlan: entered promiscuous mode [ 1139.755878][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.810856][ T797] usb 2-1: USB disconnect, device number 26 [ 1140.266428][ T9063] veth0_macvtap: entered promiscuous mode [ 1140.435822][ T9063] veth1_macvtap: entered promiscuous mode [ 1140.660511][ T9135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.776411][ T9125] veth0_vlan: entered promiscuous mode [ 1140.945426][ T9125] veth1_vlan: entered promiscuous mode [ 1141.048893][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.215479][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.442053][ T1142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.463898][ T9021] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.583336][ T9021] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.624165][ T6073] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.523431][ T9125] veth0_macvtap: entered promiscuous mode [ 1142.585814][ T9087] veth0_vlan: entered promiscuous mode [ 1142.738077][ T9125] veth1_macvtap: entered promiscuous mode [ 1142.816615][ T9087] veth1_vlan: entered promiscuous mode [ 1142.907672][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 1143.302777][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.473383][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.692322][ T9246] overlayfs: failed to resolve './file1': -2 [ 1143.792036][ T1142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.832237][ T1142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.907868][ T9087] veth0_macvtap: entered promiscuous mode [ 1143.995198][ T1142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.050238][ T6073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.318063][ T9087] veth1_macvtap: entered promiscuous mode [ 1146.171481][ T9135] veth0_vlan: entered promiscuous mode [ 1146.420357][ T9135] veth1_vlan: entered promiscuous mode [ 1146.495391][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.713558][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.045097][ T6061] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.098978][ T1142] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.262364][ T1142] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.295224][ T1142] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.607817][ T9056] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1147.708576][ T9135] veth0_macvtap: entered promiscuous mode [ 1147.823257][ T9056] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 1147.862400][ T9135] veth1_macvtap: entered promiscuous mode [ 1147.880659][ T9056] usb 2-1: config 0 has no interfaces? [ 1147.911961][ T9056] usb 2-1: config 0 has no interfaces? [ 1147.974099][ T9056] usb 2-1: config 0 has no interfaces? [ 1148.019983][ T9056] usb 2-1: config 0 has no interfaces? [ 1148.062486][ T9056] usb 2-1: config 0 has no interfaces? [ 1148.112658][ T9056] usb 2-1: config 0 has no interfaces? [ 1148.179756][ T9056] usb 2-1: config 0 has no interfaces? [ 1148.199868][ T9056] usb 2-1: config 0 has no interfaces? [ 1148.282641][ T9056] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1148.305324][ T9056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.382527][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.390673][ T9056] usb 2-1: Product: syz [ 1148.395110][ T9056] usb 2-1: Manufacturer: syz [ 1148.433977][ T9056] usb 2-1: SerialNumber: syz [ 1148.470088][ T9056] usb 2-1: config 0 descriptor?? [ 1148.678096][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.726028][ T9056] usb 2-1: USB disconnect, device number 27 [ 1148.904740][ T1142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.956963][ T1142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.024629][ T1142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.064704][ T1142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.137435][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1149.477062][ T5092] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1149.700476][ T5092] usb 2-1: Using ep0 maxpacket: 32 [ 1149.753108][ T5092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1149.815859][ T5092] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1149.889909][ T5092] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1149.937074][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1149.987252][ T5092] usb 2-1: Product: syz [ 1149.991767][ T5092] usb 2-1: Manufacturer: syz [ 1150.037122][ T5092] usb 2-1: SerialNumber: syz [ 1150.095625][ T5092] usb 2-1: config 0 descriptor?? [ 1150.723376][ T8595] usb 2-1: USB disconnect, device number 28 [ 1151.288692][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1151.306032][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1151.320400][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1151.335363][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1151.355969][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1153.457022][ T7377] Bluetooth: hci3: command tx timeout [ 1154.991808][ T9006] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.366306][ T9006] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.542146][ T7377] Bluetooth: hci3: command tx timeout [ 1155.571494][ T9006] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.887613][ T9006] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.260473][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.304932][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.663082][ T9298] chnl_net:caif_netlink_parms(): no params data found [ 1156.704395][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1156.720499][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1156.744907][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1156.788041][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1156.837306][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1156.950515][ T9354] overlayfs: failed to resolve './file1': -2 [ 1157.626825][ T5776] Bluetooth: hci3: command tx timeout [ 1157.669590][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.737272][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.787103][ T9362] block nbd1: shutting down sockets [ 1157.967527][ T9006] bridge_slave_1: left allmulticast mode [ 1157.973516][ T9006] bridge_slave_1: left promiscuous mode [ 1158.045682][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.147650][ T9006] bridge_slave_0: left allmulticast mode [ 1158.163140][ T9006] bridge_slave_0: left promiscuous mode [ 1158.187918][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.847607][ T9371] tipc: Can't bind to reserved service type 0 [ 1158.906762][ T5776] Bluetooth: hci1: command tx timeout [ 1159.723676][ T5776] Bluetooth: hci3: command tx timeout [ 1159.963515][ T9006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.047788][ T9006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.074060][ T9006] bond0 (unregistering): Released all slaves [ 1160.634504][ T9006] hsr_slave_0: left promiscuous mode [ 1160.669015][ T9006] hsr_slave_1: left promiscuous mode [ 1160.700002][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.715948][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.764146][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.777924][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.866426][ T9006] veth1_macvtap: left promiscuous mode [ 1160.884878][ T9006] veth0_macvtap: left promiscuous mode [ 1160.937213][ T9006] veth1_vlan: left promiscuous mode [ 1160.943079][ T9006] veth0_vlan: left promiscuous mode [ 1160.977012][ T5776] Bluetooth: hci1: command tx timeout [ 1161.999502][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 1162.418034][ T9006] team0 (unregistering): Port device team_slave_1 removed [ 1162.463918][ T9006] team0 (unregistering): Port device team_slave_0 removed [ 1163.058759][ T5776] Bluetooth: hci1: command tx timeout [ 1163.424783][ T9402] overlayfs: failed to resolve './file1': -2 [ 1163.951064][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.952680][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.990167][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.031685][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.052038][ T9298] bridge_slave_0: entered allmulticast mode [ 1164.070133][ T9408] block nbd1: shutting down sockets [ 1164.078308][ T9298] bridge_slave_0: entered promiscuous mode [ 1164.116080][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.137236][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.166271][ T9298] bridge_slave_1: entered allmulticast mode [ 1164.191469][ T9298] bridge_slave_1: entered promiscuous mode [ 1165.137177][ T5776] Bluetooth: hci1: command tx timeout [ 1165.309185][ T9298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.459865][ T9298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.708256][ T9006] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.163506][ T9006] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.278026][ T9298] team0: Port device team_slave_0 added [ 1166.419834][ T9006] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.508663][ T9298] team0: Port device team_slave_1 added [ 1166.624515][ T9349] chnl_net:caif_netlink_parms(): no params data found [ 1166.962222][ T9006] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.518030][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.556965][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.677145][ T9298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.865012][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.906820][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.032447][ T9298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.414620][ T7377] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1168.435246][ T7377] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1168.446420][ T7377] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1168.468067][ T7377] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1168.487079][ T7377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1168.819560][ T9298] hsr_slave_0: entered promiscuous mode [ 1168.869058][ T9298] hsr_slave_1: entered promiscuous mode [ 1168.907169][ T9298] debugfs: 'hsr0' already exists in 'hsr' [ 1168.942267][ T9298] Cannot create hsr debugfs directory [ 1169.632534][ T9006] bridge_slave_1: left allmulticast mode [ 1169.677193][ T9006] bridge_slave_1: left promiscuous mode [ 1169.689355][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.728251][ T9006] bridge_slave_0: left allmulticast mode [ 1169.746791][ T9006] bridge_slave_0: left promiscuous mode [ 1169.759126][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.577360][ T5776] Bluetooth: hci4: command tx timeout [ 1170.823383][ T9006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.878941][ T9006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.912583][ T9006] bond0 (unregistering): Released all slaves [ 1171.710010][ T9006] hsr_slave_0: left promiscuous mode [ 1171.740907][ T9006] hsr_slave_1: left promiscuous mode [ 1171.750114][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.766254][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.786702][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.795298][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.831367][ T9466] block nbd1: shutting down sockets [ 1171.907234][ T9006] veth1_macvtap: left promiscuous mode [ 1171.913589][ T9006] veth0_macvtap: left promiscuous mode [ 1171.934638][ T9006] veth1_vlan: left promiscuous mode [ 1171.947583][ T9006] veth0_vlan: left promiscuous mode [ 1172.657186][ T5776] Bluetooth: hci4: command tx timeout [ 1174.309853][ T9006] team0 (unregistering): Port device team_slave_1 removed [ 1174.420315][ T9006] team0 (unregistering): Port device team_slave_0 removed [ 1174.503292][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 1174.743943][ T5776] Bluetooth: hci4: command tx timeout [ 1174.927104][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.943566][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.958536][ T9487] block nbd2: shutting down sockets [ 1174.969314][ T9349] bridge_slave_0: entered allmulticast mode [ 1174.996332][ T9349] bridge_slave_0: entered promiscuous mode [ 1175.237486][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.290357][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.320575][ T9349] bridge_slave_1: entered allmulticast mode [ 1175.361159][ T9349] bridge_slave_1: entered promiscuous mode [ 1175.454108][ T9490] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1175.935838][ T9349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.050795][ T9349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.741719][ T9349] team0: Port device team_slave_0 added [ 1176.817072][ T5776] Bluetooth: hci4: command tx timeout [ 1176.940747][ T9349] team0: Port device team_slave_1 added [ 1177.193920][ T6073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.364771][ T6073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.495973][ T9349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.542399][ T9349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.637703][ T9349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.825660][ T6073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.130791][ T9349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.144797][ T29] audit: type=1326 audit(1772382347.884:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431a19c799 code=0x7ffc0000 [ 1178.177349][ T9349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.253518][ T29] audit: type=1326 audit(1772382347.884:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431a19c799 code=0x7ffc0000 [ 1178.290404][ T9349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.310652][ T29] audit: type=1326 audit(1772382347.914:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431a19c42b code=0x7ffc0000 [ 1178.736809][ T29] audit: type=1326 audit(1772382347.914:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431a19c42b code=0x7ffc0000 [ 1178.813647][ T29] audit: type=1326 audit(1772382347.914:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431a19c42b code=0x7ffc0000 [ 1178.861081][ T29] audit: type=1326 audit(1772382347.914:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431a19c42b code=0x7ffc0000 [ 1178.937849][ T29] audit: type=1326 audit(1772382347.914:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431a19c42b code=0x7ffc0000 [ 1179.047271][ T29] audit: type=1326 audit(1772382347.914:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431a19c42b code=0x7ffc0000 [ 1179.067986][ T6073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.098987][ T29] audit: type=1326 audit(1772382347.914:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431a19c42b code=0x7ffc0000 [ 1179.155616][ T29] audit: type=1326 audit(1772382347.914:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431a19c42b code=0x7ffc0000 [ 1179.894634][ T9349] hsr_slave_0: entered promiscuous mode [ 1179.930891][ T9349] hsr_slave_1: entered promiscuous mode [ 1179.952503][ T9349] debugfs: 'hsr0' already exists in 'hsr' [ 1179.960262][ T9349] Cannot create hsr debugfs directory [ 1180.783815][ T9443] chnl_net:caif_netlink_parms(): no params data found [ 1181.767581][ T6073] bridge_slave_1: left allmulticast mode [ 1181.773839][ T6073] bridge_slave_1: left promiscuous mode [ 1181.808048][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.909577][ T6073] bridge_slave_0: left allmulticast mode [ 1181.953213][ T6073] bridge_slave_0: left promiscuous mode [ 1181.968388][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.077717][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.129296][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.159150][ T6073] bond0 (unregistering): Released all slaves [ 1183.272552][ T9298] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1183.411671][ T9298] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1183.688541][ T9298] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1183.994131][ T9298] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1184.356829][ T9581] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 1184.393531][ T9581] netlink: 244 bytes leftover after parsing attributes in process `syz.2.471'. [ 1185.053524][ T6073] hsr_slave_0: left promiscuous mode [ 1185.074717][ T6073] hsr_slave_1: left promiscuous mode [ 1185.088698][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.101108][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.120390][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.128722][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.164925][ T6073] veth1_macvtap: left promiscuous mode [ 1185.172100][ T6073] veth0_macvtap: left promiscuous mode [ 1185.183462][ T6073] veth1_vlan: left promiscuous mode [ 1185.191801][ T6073] veth0_vlan: left promiscuous mode [ 1186.158970][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 1186.198585][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 1186.472992][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.515752][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.530660][ T9443] bridge_slave_0: entered allmulticast mode [ 1186.542636][ T9443] bridge_slave_0: entered promiscuous mode [ 1186.701827][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.721488][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.783447][ T9443] bridge_slave_1: entered allmulticast mode [ 1186.811847][ T9443] bridge_slave_1: entered promiscuous mode [ 1187.413702][ T9443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.478472][ T9443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.905395][ T9443] team0: Port device team_slave_0 added [ 1187.954591][ T9443] team0: Port device team_slave_1 added [ 1188.516208][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.546750][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.577917][ T9615] netlink: 'syz.1.479': attribute type 13 has an invalid length. [ 1188.679921][ T9443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.769441][ T8594] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1189.955980][ T8594] usb 3-1: config 0 has no interfaces? [ 1190.000345][ T8594] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1190.015845][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.034420][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.061969][ T8594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.089402][ T8594] usb 3-1: Product: syz [ 1190.089701][ T9443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.093890][ T8594] usb 3-1: Manufacturer: syz [ 1190.094007][ T8594] usb 3-1: SerialNumber: syz [ 1190.143181][ T8594] usb 3-1: config 0 descriptor?? [ 1190.433080][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.470361][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.524084][ T8415] usb 3-1: USB disconnect, device number 2 [ 1190.779054][ T9443] hsr_slave_0: entered promiscuous mode [ 1190.823820][ T9443] hsr_slave_1: entered promiscuous mode [ 1190.862292][ T9443] debugfs: 'hsr0' already exists in 'hsr' [ 1190.870904][ T9443] Cannot create hsr debugfs directory [ 1190.893735][ T9349] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1190.978310][ T9349] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1191.063177][ T9349] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1191.251687][ T9349] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1192.468037][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1192.474941][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.578352][ T9643] syzkaller0: entered promiscuous mode [ 1192.607106][ T9643] syzkaller0: entered allmulticast mode [ 1193.137540][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.430763][ T9298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.856084][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.864319][ T9015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.049594][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.057527][ T9006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.066845][ T5892] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1195.322364][ T5892] usb 2-1: config 0 has no interfaces? [ 1195.383291][ T5892] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1195.403776][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.431177][ T5892] usb 2-1: Product: syz [ 1195.457606][ T5892] usb 2-1: Manufacturer: syz [ 1195.464703][ T5892] usb 2-1: SerialNumber: syz [ 1195.489962][ T5892] usb 2-1: config 0 descriptor?? [ 1195.807421][ T9671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.838829][ T9671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.962407][ T5892] usb 2-1: USB disconnect, device number 29 [ 1196.409262][ T9349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.529961][ T9443] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1196.670068][ T9443] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1196.811419][ T9443] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1196.932785][ T9443] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1197.189888][ T9349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.333686][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.341889][ T9019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.558564][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.567265][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.472765][ T9298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.554225][ T5892] IPVS: starting estimator thread 0... [ 1199.700674][ T9714] IPVS: using max 144 ests per chain, 7200 per kthread [ 1200.343990][ T9443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.613634][ T9443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.668200][ T5824] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1200.807782][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 1200.824256][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.834709][ T9012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.890126][ T5824] usb 3-1: config 0 has no interfaces? [ 1200.953064][ T5824] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1201.011454][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.026359][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.034160][ T9019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.069068][ T5824] usb 3-1: Product: syz [ 1201.073511][ T5824] usb 3-1: Manufacturer: syz [ 1201.104948][ T5824] usb 3-1: SerialNumber: syz [ 1201.170965][ T5824] usb 3-1: config 0 descriptor?? [ 1201.523367][ T797] usb 3-1: USB disconnect, device number 3 [ 1202.488240][ T9349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.159623][ T9298] veth0_vlan: entered promiscuous mode [ 1204.385475][ T9298] veth1_vlan: entered promiscuous mode [ 1204.990114][ T9761] overlayfs: missing 'workdir' [ 1205.001939][ T9298] veth0_macvtap: entered promiscuous mode [ 1205.236175][ T9298] veth1_macvtap: entered promiscuous mode [ 1205.730329][ T9443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1205.812556][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.024170][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.155111][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 1206.203782][ T6073] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.246753][ T9019] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.255995][ T9019] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.385132][ T9019] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.196958][ T797] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1207.362951][ T9349] veth0_vlan: entered promiscuous mode [ 1207.445616][ T797] usb 3-1: config 0 has no interfaces? [ 1207.519117][ T797] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1207.569747][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.579617][ T9349] veth1_vlan: entered promiscuous mode [ 1207.632563][ T797] usb 3-1: Product: syz [ 1207.646831][ T797] usb 3-1: Manufacturer: syz [ 1207.662863][ T797] usb 3-1: SerialNumber: syz [ 1207.719787][ T797] usb 3-1: config 0 descriptor?? [ 1208.151533][ T9057] usb 3-1: USB disconnect, device number 4 [ 1209.043145][ T9349] veth0_macvtap: entered promiscuous mode [ 1209.101978][ T9349] veth1_macvtap: entered promiscuous mode [ 1209.643267][ T9349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.850442][ T9349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.972669][ T9000] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.000266][ T9000] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.075197][ T9002] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.161489][ T5975] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.571750][ T9443] veth0_vlan: entered promiscuous mode [ 1210.784063][ T9443] veth1_vlan: entered promiscuous mode [ 1211.598826][ T9443] veth0_macvtap: entered promiscuous mode [ 1211.711170][ T9443] veth1_macvtap: entered promiscuous mode [ 1211.880238][ T9812] overlayfs: missing 'workdir' [ 1212.174160][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.377492][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.455258][ T7377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1212.488828][ T7377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1212.498270][ T7377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1212.539401][ T7377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1212.581042][ T7377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1212.655854][ T5975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.682219][ T5975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.701973][ T5975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.797685][ T5975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.826796][ T9056] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1214.083112][ T9056] usb 3-1: Using ep0 maxpacket: 32 [ 1214.158647][ T9056] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.225127][ T9056] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.286957][ T9056] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1214.316042][ T9056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.412326][ T9056] usb 3-1: config 0 descriptor?? [ 1214.658530][ T5776] Bluetooth: hci0: command tx timeout [ 1215.278359][ T9056] usbhid 3-1:0.0: can't add hid device: -71 [ 1215.284942][ T9056] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1215.314368][ T9056] usb 3-1: USB disconnect, device number 5 [ 1215.902621][ T9006] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.255654][ T9006] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.742054][ T5776] Bluetooth: hci0: command tx timeout [ 1216.765162][ T9006] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.872023][ T8415] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1217.088192][ T8415] usb 3-1: config 0 has no interfaces? [ 1217.183970][ T8415] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1217.210350][ T8415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.251872][ T9006] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.283456][ T8415] usb 3-1: Product: syz [ 1217.307136][ T8415] usb 3-1: Manufacturer: syz [ 1217.312098][ T8415] usb 3-1: SerialNumber: syz [ 1217.365186][ T8415] usb 3-1: config 0 descriptor?? [ 1217.411371][ T9849] overlayfs: missing 'lowerdir' [ 1217.725495][ T9056] usb 3-1: USB disconnect, device number 6 [ 1218.209238][ T7377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1218.225908][ T7377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1218.236375][ T7377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1218.251564][ T7377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1218.270725][ T7377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1218.314295][ T9816] chnl_net:caif_netlink_parms(): no params data found [ 1218.817419][ T7377] Bluetooth: hci0: command tx timeout [ 1218.951761][ T9006] bridge_slave_1: left allmulticast mode [ 1218.972230][ T9006] bridge_slave_1: left promiscuous mode [ 1219.018737][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.064441][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'. [ 1219.075637][ T9006] bridge_slave_0: left allmulticast mode [ 1219.089740][ T9006] bridge_slave_0: left promiscuous mode [ 1219.115575][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.657556][ T9864] overlayfs: missing 'workdir' [ 1220.420293][ T5824] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1220.430110][ T7377] Bluetooth: hci3: command tx timeout [ 1220.607636][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 1220.804086][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.871908][ T9006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.922426][ T7377] Bluetooth: hci0: command tx timeout [ 1220.943021][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.103920][ T5824] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1221.232899][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.288514][ T9006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.314493][ T9006] bond0 (unregistering): Released all slaves [ 1221.347524][ T5824] usb 2-1: config 0 descriptor?? [ 1221.834096][ T9006] hsr_slave_0: left promiscuous mode [ 1221.841623][ T5824] usbhid 2-1:0.0: can't add hid device: -71 [ 1221.842268][ T5824] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1221.928391][ T9006] hsr_slave_1: left promiscuous mode [ 1221.960262][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.969713][ T5824] usb 2-1: USB disconnect, device number 30 [ 1221.999655][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.048441][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.087358][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.157987][ T9006] veth1_macvtap: left promiscuous mode [ 1222.176212][ T9006] veth0_macvtap: left promiscuous mode [ 1222.184363][ T9006] veth1_vlan: left promiscuous mode [ 1222.201989][ T9006] veth0_vlan: left promiscuous mode [ 1222.501715][ T7377] Bluetooth: hci3: command tx timeout [ 1222.927808][ T9879] overlayfs: missing 'lowerdir' [ 1224.577244][ T7377] Bluetooth: hci3: command tx timeout [ 1225.167773][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 1225.459248][ T9006] team0 (unregistering): Port device team_slave_1 removed [ 1225.569257][ T9006] team0 (unregistering): Port device team_slave_0 removed [ 1226.102152][ T9891] overlayfs: missing 'lowerdir' [ 1226.657082][ T7377] Bluetooth: hci3: command tx timeout [ 1227.873609][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.888703][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.901342][ T9816] bridge_slave_0: entered allmulticast mode [ 1227.913621][ T9816] bridge_slave_0: entered promiscuous mode [ 1227.970967][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.998650][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.024987][ T9816] bridge_slave_1: entered allmulticast mode [ 1228.036159][ T9816] bridge_slave_1: entered promiscuous mode [ 1228.323582][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.359007][ T9006] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.436392][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.514513][ T9006] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.792548][ T9006] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.880893][ T9903] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1228.937416][ T9903] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1229.007642][ T5824] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1229.139057][ T9816] team0: Port device team_slave_0 added [ 1229.199025][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 1229.246284][ T9006] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.249928][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.286981][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.317438][ T5824] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1229.344061][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.405508][ T5824] usb 2-1: config 0 descriptor?? [ 1229.509894][ T9816] team0: Port device team_slave_1 added [ 1229.909606][ T8822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1229.919615][ T8822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1229.932301][ T8822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1229.957918][ T8822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1229.970883][ T8822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1230.002742][ T5824] hid_parser_main: 12 callbacks suppressed [ 1230.002867][ T5824] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 1230.036872][ T5824] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 1230.048120][ T5824] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 1230.055261][ T5824] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 1230.062682][ T5824] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 1230.071960][ T5824] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 1230.081529][ T5824] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 1230.091300][ T5824] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 1230.129622][ T5824] savu 0003:1E7D:2D5A.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1230.248077][ T5824] usb 2-1: USB disconnect, device number 31 [ 1230.271868][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.302091][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.337235][ T8822] Bluetooth: hci5: command 0x0406 tx timeout [ 1230.344141][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.372955][ T9852] chnl_net:caif_netlink_parms(): no params data found [ 1230.654755][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.675366][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.719193][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 1230.743176][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.829337][ T9912] fido_id[9912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1231.924702][ T9923] overlayfs: missing 'lowerdir' [ 1232.017451][ T7377] Bluetooth: hci1: command tx timeout [ 1232.649281][ T9816] hsr_slave_0: entered promiscuous mode [ 1232.679731][ T9816] hsr_slave_1: entered promiscuous mode [ 1232.712144][ T9816] debugfs: 'hsr0' already exists in 'hsr' [ 1232.738370][ T9816] Cannot create hsr debugfs directory [ 1232.971221][ T9928] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1232.987353][ T9928] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1233.499687][ T9934] netlink: 'syz.2.551': attribute type 3 has an invalid length. [ 1233.552589][ T9934] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 1233.563781][ T9934] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.551'. [ 1233.757089][ T9056] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1233.847449][ T9006] bridge_slave_1: left allmulticast mode [ 1233.862461][ T9006] bridge_slave_1: left promiscuous mode [ 1233.871527][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.890410][ T9006] bridge_slave_0: left allmulticast mode [ 1233.897310][ T9006] bridge_slave_0: left promiscuous mode [ 1233.904085][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.936963][ T9056] usb 2-1: Using ep0 maxpacket: 32 [ 1233.950901][ T9056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.966393][ T9056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.978243][ T9056] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1234.007284][ T9056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.040650][ T9056] usb 2-1: config 0 descriptor?? [ 1234.098980][ T7377] Bluetooth: hci1: command tx timeout [ 1234.626934][ T9056] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 1234.634116][ T9056] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 1234.709342][ T9056] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1234.798923][ T9056] usb 2-1: USB disconnect, device number 32 [ 1235.052758][ T9006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.148434][ T9006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.255409][ T9006] bond0 (unregistering): Released all slaves [ 1235.403853][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.524891][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.702723][ T9852] bridge_slave_0: entered allmulticast mode [ 1235.948728][ T9852] bridge_slave_0: entered promiscuous mode [ 1236.083391][ T9942] fido_id[9942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1236.177785][ T7377] Bluetooth: hci1: command tx timeout [ 1236.357932][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.365823][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.447537][ T9852] bridge_slave_1: entered allmulticast mode [ 1236.485125][ T9852] bridge_slave_1: entered promiscuous mode [ 1236.529829][ T9951] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1236.558884][ T9951] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1236.629272][ T9006] hsr_slave_0: left promiscuous mode [ 1236.647393][ T9006] hsr_slave_1: left promiscuous mode [ 1236.657253][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.674600][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.703394][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.717179][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.756122][ T9006] veth1_macvtap: left promiscuous mode [ 1236.764772][ T9006] veth0_macvtap: left promiscuous mode [ 1236.772595][ T9006] veth1_vlan: left promiscuous mode [ 1236.778606][ T9006] veth0_vlan: left promiscuous mode [ 1238.257008][ T7377] Bluetooth: hci1: command tx timeout [ 1238.512533][ T9006] team0 (unregistering): Port device team_slave_1 removed [ 1238.570164][ T9006] team0 (unregistering): Port device team_slave_0 removed [ 1240.474987][ T9852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.566128][ T9852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.810711][ T9975] overlayfs: missing 'lowerdir' [ 1242.195496][ T9852] team0: Port device team_slave_0 added [ 1242.505914][ T9852] team0: Port device team_slave_1 added [ 1242.869147][ T9006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.940877][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 1244.117966][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.136173][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.197292][ T9852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.303406][ T9006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.491172][T10002] overlayfs: missing 'lowerdir' [ 1244.640090][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.657769][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.725194][ T9852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.824038][ T9006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.189752][ T9006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.750811][ T9852] hsr_slave_0: entered promiscuous mode [ 1245.785684][ T9852] hsr_slave_1: entered promiscuous mode [ 1245.807110][ T9852] debugfs: 'hsr0' already exists in 'hsr' [ 1245.826959][ T9852] Cannot create hsr debugfs directory [ 1246.195502][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 1246.600306][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.613607][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.624137][ T9908] bridge_slave_0: entered allmulticast mode [ 1246.652824][ T9908] bridge_slave_0: entered promiscuous mode [ 1246.710789][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.723595][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.758085][ T9908] bridge_slave_1: entered allmulticast mode [ 1246.791074][ T9908] bridge_slave_1: entered promiscuous mode [ 1246.921098][ T9816] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1246.992698][ T9816] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1247.186936][ T9816] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1247.561004][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.574669][ T9816] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1248.131151][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.529052][ T9006] bridge_slave_1: left allmulticast mode [ 1248.534931][ T9006] bridge_slave_1: left promiscuous mode [ 1248.588424][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.613224][ T9006] bridge_slave_0: left allmulticast mode [ 1248.626747][ T9006] bridge_slave_0: left promiscuous mode [ 1248.633843][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.579113][T10026] overlayfs: missing 'lowerdir' [ 1249.738776][ T9006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.783608][ T9006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.862186][ T9006] bond0 (unregistering): Released all slaves [ 1250.272271][ T9908] team0: Port device team_slave_0 added [ 1250.774295][ T9908] team0: Port device team_slave_1 added [ 1251.032270][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 1251.059733][ T9006] hsr_slave_0: left promiscuous mode [ 1251.072320][ T9006] hsr_slave_1: left promiscuous mode [ 1251.089589][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.114990][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.135667][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.156273][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.200265][ T9006] veth1_macvtap: left promiscuous mode [ 1251.206130][ T9006] veth0_macvtap: left promiscuous mode [ 1251.214609][ T9006] veth1_vlan: left promiscuous mode [ 1251.220651][ T9006] veth0_vlan: left promiscuous mode [ 1252.866083][ T9006] team0 (unregistering): Port device team_slave_1 removed [ 1252.965846][ T9006] team0 (unregistering): Port device team_slave_0 removed [ 1253.239560][T10044] overlayfs: missing 'workdir' [ 1253.806037][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.846811][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.888242][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.910714][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.918772][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.923514][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1253.955775][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1253.983350][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.662337][ T9908] hsr_slave_0: entered promiscuous mode [ 1254.685770][ T9908] hsr_slave_1: entered promiscuous mode [ 1254.739126][ T9908] debugfs: 'hsr0' already exists in 'hsr' [ 1254.745205][ T9908] Cannot create hsr debugfs directory [ 1254.773537][T10051] warning: `syz.2.595' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1256.217588][T10063] overlayfs: missing 'workdir' [ 1256.439846][ T9852] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1256.549523][ T9852] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1256.798738][ T9852] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1256.990874][ T9852] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1257.248055][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.544626][ T9816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.756210][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.764207][ T9019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.293222][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.300780][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.497635][T10085] overlayfs: missing 'workdir' [ 1259.848118][ T9816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1259.884062][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 1260.070724][ T9908] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1260.189781][ T9908] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1260.305610][ T9908] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1260.438579][ T9908] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1260.901990][ T9852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.475193][ T9852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.782404][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.790387][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.422552][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.430901][ T9002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.970851][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.798765][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 1263.849033][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.206948][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.333096][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.340770][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.600016][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.607782][ T9000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.237880][ T9852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.341718][ T9816] veth0_vlan: entered promiscuous mode [ 1267.597536][ T9816] veth1_vlan: entered promiscuous mode [ 1268.215945][ T9816] veth0_macvtap: entered promiscuous mode [ 1268.404801][ T9816] veth1_macvtap: entered promiscuous mode [ 1268.766292][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.995371][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.148973][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.317195][ T5975] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.388114][ T5975] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.436924][ T5975] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.526957][ T5975] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.822169][ T9852] veth0_vlan: entered promiscuous mode [ 1272.269864][ T9852] veth1_vlan: entered promiscuous mode [ 1272.737539][ T9852] veth0_macvtap: entered promiscuous mode [ 1272.866923][ T9852] veth1_macvtap: entered promiscuous mode [ 1273.345816][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.426138][ T9908] veth0_vlan: entered promiscuous mode [ 1273.570973][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.757594][ T79] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.803864][ T79] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.854758][ T9908] veth1_vlan: entered promiscuous mode [ 1273.954721][ T79] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.992108][ T79] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.831681][ T8822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1274.848212][ T8822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1274.867983][ T9908] veth0_macvtap: entered promiscuous mode [ 1274.874780][ T8822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1274.901020][ T8822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1274.935470][ T8822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1275.198131][ T9908] veth1_macvtap: entered promiscuous mode [ 1275.828422][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.308189][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.999958][ T9012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.059281][ T8822] Bluetooth: hci4: command tx timeout [ 1277.085448][ T9000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.135659][ T9015] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.224459][ T9012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.239494][ T9012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.413566][ T9015] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.742431][ T9015] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.922708][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1277.922798][ T29] audit: type=1800 audit(1772382447.654:175): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="bus" dev="overlay" ino=1713 res=0 errno=0 [ 1278.152874][ T9015] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.933650][ T7377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1278.948134][ T7377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1278.965786][ T7377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1279.029368][ T7377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1279.050035][ T7377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1279.157336][ T8822] Bluetooth: hci4: command tx timeout [ 1280.168699][T10267] xt_hashlimit: max too large, truncated to 1048576 [ 1280.243249][ T9015] bridge_slave_1: left allmulticast mode [ 1280.271286][ T9015] bridge_slave_1: left promiscuous mode [ 1280.299377][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.359710][ T9015] bridge_slave_0: left allmulticast mode [ 1280.376354][ T9015] bridge_slave_0: left promiscuous mode [ 1280.383700][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.146729][ T8822] Bluetooth: hci0: command tx timeout [ 1281.216777][ T8822] Bluetooth: hci4: command tx timeout [ 1281.509405][ T9015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.600680][ T9015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.625898][ T9015] bond0 (unregistering): Released all slaves [ 1281.830428][T10267] vlan2: entered promiscuous mode [ 1281.835803][T10267] geneve1: entered promiscuous mode [ 1281.870328][T10267] vlan2: entered allmulticast mode [ 1281.875698][T10267] geneve1: entered allmulticast mode [ 1281.917505][T10220] chnl_net:caif_netlink_parms(): no params data found [ 1282.535475][ T29] audit: type=1800 audit(1772382452.274:176): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.654" name="bus" dev="overlay" ino=599 res=0 errno=0 [ 1282.664773][ T9015] hsr_slave_0: left promiscuous mode [ 1282.704115][ T9015] hsr_slave_1: left promiscuous mode [ 1282.735909][ T9015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.761997][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.789765][ T9015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1282.812089][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.010179][ T9015] veth1_macvtap: left promiscuous mode [ 1283.015980][ T9015] veth0_macvtap: left promiscuous mode [ 1283.032186][ T9015] veth1_vlan: left promiscuous mode [ 1283.038373][ T9015] veth0_vlan: left promiscuous mode [ 1283.217592][ T8822] Bluetooth: hci0: command tx timeout [ 1283.299854][ T8822] Bluetooth: hci4: command tx timeout [ 1284.438256][ T9015] team0 (unregistering): Port device team_slave_1 removed [ 1284.484583][ T9015] team0 (unregistering): Port device team_slave_0 removed [ 1285.299690][ T8822] Bluetooth: hci0: command tx timeout [ 1286.022760][ T29] audit: type=1800 audit(1772382455.744:177): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.663" name="bus" dev="overlay" ino=618 res=0 errno=0 [ 1286.664365][ T9015] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.936381][T10257] chnl_net:caif_netlink_parms(): no params data found [ 1287.153555][ T9015] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.376850][ T8822] Bluetooth: hci0: command tx timeout [ 1287.603205][ T9015] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.249774][ T9015] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.367426][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.375421][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.457260][T10220] bridge_slave_0: entered allmulticast mode [ 1288.492988][T10220] bridge_slave_0: entered promiscuous mode [ 1288.567098][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.601309][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.647563][T10220] bridge_slave_1: entered allmulticast mode [ 1288.689858][T10220] bridge_slave_1: entered promiscuous mode [ 1289.187738][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.347879][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.207602][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.245070][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.264109][T10257] bridge_slave_0: entered allmulticast mode [ 1290.285998][T10257] bridge_slave_0: entered promiscuous mode [ 1290.347284][T10220] team0: Port device team_slave_0 added [ 1290.370855][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.392487][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.408412][T10257] bridge_slave_1: entered allmulticast mode [ 1290.424532][T10257] bridge_slave_1: entered promiscuous mode [ 1290.467451][T10220] team0: Port device team_slave_1 added [ 1290.477351][ T9015] bridge_slave_1: left allmulticast mode [ 1290.489304][ T9015] bridge_slave_1: left promiscuous mode [ 1290.500608][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.523634][ T9015] bridge_slave_0: left allmulticast mode [ 1290.532700][ T9015] bridge_slave_0: left promiscuous mode [ 1290.543244][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.985468][ T29] audit: type=1800 audit(1772382460.724:178): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.672" name="bus" dev="overlay" ino=652 res=0 errno=0 [ 1291.880032][ T9015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.978100][ T9015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.991233][ T7377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1292.012306][ T7377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1292.028578][ T7377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1292.057904][ T7377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1292.079257][ T9015] bond0 (unregistering): Released all slaves [ 1292.089266][ T7377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1292.809802][T10379] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1292.893985][ T9015] hsr_slave_0: left promiscuous mode [ 1292.943507][ T9015] hsr_slave_1: left promiscuous mode [ 1292.956373][ T9015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.982349][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1293.008611][ T9015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1293.016240][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1293.127922][ T9015] veth1_macvtap: left promiscuous mode [ 1293.140009][ T9015] veth0_macvtap: left promiscuous mode [ 1293.151992][ T9015] veth1_vlan: left promiscuous mode [ 1293.159054][ T9015] veth0_vlan: left promiscuous mode [ 1293.794753][T10393] netlink: 44 bytes leftover after parsing attributes in process `syz.2.680'. [ 1293.848474][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 1293.876365][T10393] netlink: 43 bytes leftover after parsing attributes in process `syz.2.680'. [ 1293.925093][T10393] netlink: 'syz.2.680': attribute type 5 has an invalid length. [ 1293.945372][T10393] netlink: 43 bytes leftover after parsing attributes in process `syz.2.680'. [ 1294.181907][ T7377] Bluetooth: hci3: command tx timeout [ 1294.475578][ T9015] team0 (unregistering): Port device team_slave_1 removed [ 1294.530977][ T9015] team0 (unregistering): Port device team_slave_0 removed [ 1294.988277][T10257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.998929][T10380] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.676'. [ 1295.052997][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.070500][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.161309][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.321418][T10396] batadv0: entered promiscuous mode [ 1295.339259][T10396] macvtap1: entered promiscuous mode [ 1295.345875][T10396] macvtap1: entered allmulticast mode [ 1295.372820][T10396] batadv0: entered allmulticast mode [ 1295.396170][T10396] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1295.443140][T10257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.487642][ T29] audit: type=1800 audit(1772382465.204:179): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.681" name="bus" dev="overlay" ino=1827 res=0 errno=0 [ 1295.566997][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.574581][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.635839][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.954894][T10257] team0: Port device team_slave_0 added [ 1296.043390][T10257] team0: Port device team_slave_1 added [ 1296.257931][ T7377] Bluetooth: hci3: command tx timeout [ 1296.498438][T10257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.527093][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.624164][T10257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.859758][T10257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.877018][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.915027][T10257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.152824][ T79] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.238609][T10220] hsr_slave_0: entered promiscuous mode [ 1297.252196][T10220] hsr_slave_1: entered promiscuous mode [ 1297.270652][T10220] debugfs: 'hsr0' already exists in 'hsr' [ 1297.293720][T10220] Cannot create hsr debugfs directory [ 1297.604698][ T79] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.016409][T10257] hsr_slave_0: entered promiscuous mode [ 1298.048972][T10257] hsr_slave_1: entered promiscuous mode [ 1298.060156][T10257] debugfs: 'hsr0' already exists in 'hsr' [ 1298.066908][T10257] Cannot create hsr debugfs directory [ 1298.255914][ T79] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.347391][ T7377] Bluetooth: hci3: command tx timeout [ 1298.680447][ T79] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.814952][T10446] netlink: 'syz.1.697': attribute type 32 has an invalid length. [ 1300.375254][T10452] tipc: Enabling of bearer rejected, failed to enable media [ 1300.416980][ T7377] Bluetooth: hci3: command tx timeout [ 1301.057961][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 1301.392876][ T79] bridge_slave_1: left allmulticast mode [ 1301.407073][ T79] bridge_slave_1: left promiscuous mode [ 1301.419717][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.444333][ T79] bridge_slave_0: left allmulticast mode [ 1301.451177][ T79] bridge_slave_0: left promiscuous mode [ 1301.458574][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.947847][T10469] netlink: 112 bytes leftover after parsing attributes in process `syz.2.703'. [ 1303.597314][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.615023][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.640539][ T79] bond0 (unregistering): Released all slaves [ 1303.960815][ T79] hsr_slave_0: left promiscuous mode [ 1304.019299][ T79] hsr_slave_1: left promiscuous mode [ 1304.054599][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.110721][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.126986][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.134718][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.164194][ T79] veth1_macvtap: left promiscuous mode [ 1304.177845][ T79] veth0_macvtap: left promiscuous mode [ 1304.197919][ T79] veth1_vlan: left promiscuous mode [ 1304.203530][ T79] veth0_vlan: left promiscuous mode [ 1306.358302][ T79] team0 (unregistering): Port device team_slave_1 removed [ 1306.419875][ T79] team0 (unregistering): Port device team_slave_0 removed [ 1306.965794][T10500] netlink: 112 bytes leftover after parsing attributes in process `syz.2.712'. [ 1308.781063][T10373] chnl_net:caif_netlink_parms(): no params data found [ 1309.282396][T10220] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1309.574051][T10220] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1309.769423][T10220] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1309.964993][T10220] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1311.242164][T10373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.261618][T10373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.287493][T10373] bridge_slave_0: entered allmulticast mode [ 1311.311589][T10373] bridge_slave_0: entered promiscuous mode [ 1311.384468][T10373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.401465][T10373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.411669][T10373] bridge_slave_1: entered allmulticast mode [ 1311.435227][T10373] bridge_slave_1: entered promiscuous mode [ 1311.449177][T10257] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1312.022011][T10536] netlink: 112 bytes leftover after parsing attributes in process `syz.2.720'. [ 1312.914530][T10257] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1313.442594][T10257] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1313.592355][T10257] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1313.754085][T10373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.253831][T10373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.439626][T10541] syzkaller0: entered promiscuous mode [ 1314.445354][T10541] syzkaller0: entered allmulticast mode [ 1314.828913][T10373] team0: Port device team_slave_0 added [ 1314.975444][T10373] team0: Port device team_slave_1 added [ 1315.329792][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.337175][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.545591][T10373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.574070][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.612052][T10373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.716395][T10373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.727546][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.769234][T10373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.810958][T10565] lo: Caught tx_queue_len zero misconfig [ 1316.312010][T10373] hsr_slave_0: entered promiscuous mode [ 1316.334419][T10373] hsr_slave_1: entered promiscuous mode [ 1316.369262][T10373] debugfs: 'hsr0' already exists in 'hsr' [ 1316.420930][T10373] Cannot create hsr debugfs directory [ 1316.509163][T10572] netlink: 112 bytes leftover after parsing attributes in process `syz.2.729'. [ 1318.650010][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.330410][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.728698][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.736376][ T9021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.884287][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.892106][ T9002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.958889][T10257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.404889][T10257] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.542527][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.550331][ T9002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.021759][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.029676][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.126889][T10373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1321.266026][T10373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1321.400596][T10373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1321.503515][T10373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1324.066098][T10373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.366372][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.542306][T10373] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.790470][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.798296][ T9000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.153374][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.161335][ T9012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.339586][T10257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.413564][T10640] syzkaller0: entered promiscuous mode [ 1326.427888][T10640] syzkaller0: entered allmulticast mode [ 1327.763754][T10220] veth0_vlan: entered promiscuous mode [ 1327.927451][T10220] veth1_vlan: entered promiscuous mode [ 1328.808825][T10220] veth0_macvtap: entered promiscuous mode [ 1329.013376][T10220] veth1_macvtap: entered promiscuous mode [ 1329.391820][T10373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.761518][T10257] veth0_vlan: entered promiscuous mode [ 1329.943153][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.103955][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.161851][T10257] veth1_vlan: entered promiscuous mode [ 1330.451050][ T79] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.551759][ T6061] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.576089][ T6061] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.637329][ T6061] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.924451][T10257] veth0_macvtap: entered promiscuous mode [ 1331.093599][T10257] veth1_macvtap: entered promiscuous mode [ 1331.488355][T10257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.691067][T10257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.920655][ T1142] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.966787][ T1142] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.975964][ T1142] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.162268][ T9010] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.549801][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 1332.834994][T10704] syz_tun: entered promiscuous mode [ 1332.895325][T10704] macvtap2: entered promiscuous mode [ 1332.920860][T10704] macvtap2: entered allmulticast mode [ 1332.951051][T10704] syz_tun: entered allmulticast mode [ 1333.409763][T10373] veth0_vlan: entered promiscuous mode [ 1333.664280][T10373] veth1_vlan: entered promiscuous mode [ 1334.309896][T10373] veth0_macvtap: entered promiscuous mode [ 1334.363147][T10373] veth1_macvtap: entered promiscuous mode [ 1334.663003][T10373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.790259][T10373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.068352][ T9015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.126869][ T9015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.192496][ T9015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.242658][ T9015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.877455][ T8822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1336.901749][ T8822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1336.916359][ T8822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1336.932506][ T8822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1336.952948][ T8822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1338.786997][ T9021] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.056669][ T8822] Bluetooth: hci1: command tx timeout [ 1339.242768][ T9021] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.893045][ T9021] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.294647][ T9021] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.611966][T10745] chnl_net:caif_netlink_parms(): no params data found [ 1340.715609][ T7377] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1340.756593][ T7377] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1340.777916][ T7377] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1340.805497][ T7377] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1340.848407][ T7377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1341.153865][ T8822] Bluetooth: hci1: command tx timeout [ 1342.100366][ T9021] bridge_slave_1: left allmulticast mode [ 1342.142868][ T9021] bridge_slave_1: left promiscuous mode [ 1342.154116][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.297768][ T9021] bridge_slave_0: left allmulticast mode [ 1342.303768][ T9021] bridge_slave_0: left promiscuous mode [ 1342.391871][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.977007][ T8822] Bluetooth: hci4: command tx timeout [ 1343.219432][ T8822] Bluetooth: hci1: command tx timeout [ 1343.873307][ T9021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.948809][ T9021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.993519][ T9021] bond0 (unregistering): Released all slaves [ 1344.653549][ T9021] hsr_slave_0: left promiscuous mode [ 1344.695862][ T9021] hsr_slave_1: left promiscuous mode [ 1344.730653][ T9021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.770584][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.833620][ T9021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.863340][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.904717][ T9021] veth1_macvtap: left promiscuous mode [ 1344.935066][ T9021] veth0_macvtap: left promiscuous mode [ 1344.953245][ T9021] veth1_vlan: left promiscuous mode [ 1344.961812][ T9021] veth0_vlan: left promiscuous mode [ 1345.056845][ T8822] Bluetooth: hci4: command tx timeout [ 1345.298131][ T8822] Bluetooth: hci1: command tx timeout [ 1346.477621][ T9021] team0 (unregistering): Port device team_slave_1 removed [ 1346.516287][ T9021] team0 (unregistering): Port device team_slave_0 removed [ 1347.147405][ T8822] Bluetooth: hci4: command tx timeout [ 1347.561337][T10745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.607204][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.641003][T10745] bridge_slave_0: entered allmulticast mode [ 1347.687308][T10745] bridge_slave_0: entered promiscuous mode [ 1347.824619][T10745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.887174][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.895524][T10745] bridge_slave_1: entered allmulticast mode [ 1347.943932][T10745] bridge_slave_1: entered promiscuous mode [ 1348.472264][T10745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.584235][T10745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.140958][T10745] team0: Port device team_slave_0 added [ 1349.195678][T10745] team0: Port device team_slave_1 added [ 1349.220846][ T8822] Bluetooth: hci4: command tx timeout [ 1349.564062][ T9021] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.023789][ T9021] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.381718][ T9021] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.460054][T10745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.511915][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.593318][T10745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.649567][T10745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.706743][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.752437][T10745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.914200][ T9021] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.107445][ T9000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.115775][ T9000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.599301][T10784] chnl_net:caif_netlink_parms(): no params data found [ 1351.728848][T10745] hsr_slave_0: entered promiscuous mode [ 1351.750235][T10745] hsr_slave_1: entered promiscuous mode [ 1351.761452][T10745] debugfs: 'hsr0' already exists in 'hsr' [ 1351.767704][T10745] Cannot create hsr debugfs directory [ 1352.602777][ T9021] bridge_slave_1: left allmulticast mode [ 1352.626818][ T9021] bridge_slave_1: left promiscuous mode [ 1352.633603][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.671959][ T9021] bridge_slave_0: left allmulticast mode [ 1352.688034][ T9021] bridge_slave_0: left promiscuous mode [ 1352.694830][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.162068][ T9021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.228987][ T9021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.270861][ T9021] bond0 (unregistering): Released all slaves [ 1354.373492][ T7377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1354.388227][ T7377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1354.398458][ T7377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1354.418745][ T7377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1354.440995][ T7377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1354.873330][ T9021] hsr_slave_0: left promiscuous mode [ 1354.893649][ T9021] hsr_slave_1: left promiscuous mode [ 1354.933970][ T9021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.948170][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.008620][ T9021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.016255][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.108221][ T9021] veth1_macvtap: left promiscuous mode [ 1355.114350][ T9021] veth0_macvtap: left promiscuous mode [ 1355.136989][ T9021] veth1_vlan: left promiscuous mode [ 1355.142698][ T9021] veth0_vlan: left promiscuous mode [ 1356.497044][ T8822] Bluetooth: hci0: command tx timeout [ 1357.051737][ T9021] team0 (unregistering): Port device team_slave_1 removed [ 1357.157230][ T9021] team0 (unregistering): Port device team_slave_0 removed [ 1358.321036][T10784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.329347][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.339445][T10784] bridge_slave_0: entered allmulticast mode [ 1358.356014][T10784] bridge_slave_0: entered promiscuous mode [ 1358.379959][T10784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.388805][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.400071][T10784] bridge_slave_1: entered allmulticast mode [ 1358.413548][T10784] bridge_slave_1: entered promiscuous mode [ 1358.578556][ T8822] Bluetooth: hci0: command tx timeout [ 1358.800173][T10937] binder: BINDER_SET_CONTEXT_MGR already set [ 1358.815558][T10937] binder: 10935:10937 ioctl 4018620d 200000000040 returned -16 [ 1359.292593][T10784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.352047][T10784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.836341][ T6061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.841328][T10937] syz.1.808 (10937): drop_caches: 2 [ 1360.115736][T10784] team0: Port device team_slave_0 added [ 1360.272789][ T6061] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.617620][T10784] team0: Port device team_slave_1 added [ 1360.656739][ T8822] Bluetooth: hci0: command tx timeout [ 1360.891127][ T6061] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.360422][ T6061] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.441844][T10784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.451893][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.484612][T10784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.504036][T10784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.543839][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.634160][T10784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.439054][T10784] hsr_slave_0: entered promiscuous mode [ 1362.455502][T10784] hsr_slave_1: entered promiscuous mode [ 1362.465787][T10784] debugfs: 'hsr0' already exists in 'hsr' [ 1362.474037][T10784] Cannot create hsr debugfs directory [ 1362.737312][ T8822] Bluetooth: hci0: command tx timeout [ 1363.507703][ T6061] bridge_slave_1: left allmulticast mode [ 1363.513695][ T6061] bridge_slave_1: left promiscuous mode [ 1363.537768][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.603106][ T6061] bridge_slave_0: left allmulticast mode [ 1363.609551][ T6061] bridge_slave_0: left promiscuous mode [ 1363.616317][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.398183][T10965] binder: BINDER_SET_CONTEXT_MGR already set [ 1364.408955][T10965] binder: 10964:10965 ioctl 4018620d 200000000040 returned -16 [ 1364.450266][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.498860][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.568439][ T6061] bond0 (unregistering): Released all slaves [ 1364.982808][T10898] chnl_net:caif_netlink_parms(): no params data found [ 1365.096624][T10745] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1365.175549][T10965] syz.1.818 (10965): drop_caches: 2 [ 1365.610414][T10745] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1365.801638][T10745] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1365.872911][T10745] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1366.350065][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 1366.631625][ T6061] hsr_slave_0: left promiscuous mode [ 1366.659851][ T6061] hsr_slave_1: left promiscuous mode [ 1366.672810][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.684694][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.699593][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.742274][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.814184][ T6061] veth1_macvtap: left promiscuous mode [ 1366.832301][ T6061] veth0_macvtap: left promiscuous mode [ 1366.842976][ T6061] veth1_vlan: left promiscuous mode [ 1366.864866][ T6061] veth0_vlan: left promiscuous mode [ 1367.761382][ T6061] team0 (unregistering): Port device team_slave_1 removed [ 1367.814813][ T6061] team0 (unregistering): Port device team_slave_0 removed [ 1368.365426][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 1368.740362][T10898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.768908][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.782830][T10898] bridge_slave_0: entered allmulticast mode [ 1368.839899][T10898] bridge_slave_0: entered promiscuous mode [ 1368.893728][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.827'. [ 1368.963078][T10898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.982781][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.994251][T10898] bridge_slave_1: entered allmulticast mode [ 1369.007343][T10898] bridge_slave_1: entered promiscuous mode [ 1369.424184][T10898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.551686][T10898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.873187][T10898] team0: Port device team_slave_0 added [ 1369.928148][T10898] team0: Port device team_slave_1 added [ 1370.503334][T10898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.517899][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.548071][T10898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.573713][T10898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.591668][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.629238][T10898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.985547][T10784] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1371.133843][T10784] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1371.185625][T10784] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1371.238499][T10898] hsr_slave_0: entered promiscuous mode [ 1371.269279][T10898] hsr_slave_1: entered promiscuous mode [ 1371.291041][T10898] debugfs: 'hsr0' already exists in 'hsr' [ 1371.313141][T10898] Cannot create hsr debugfs directory [ 1371.331041][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 1371.345595][T10784] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1372.026822][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.838'. [ 1372.154533][T10745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.685898][T11026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'. [ 1372.776189][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 1372.816297][T10745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.904446][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 1372.988195][ T6061] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1373.017623][ T6061] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1373.163351][ T6061] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1373.208507][ T6061] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1373.335547][ T9010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.343382][ T9010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1373.502988][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.510685][ T9002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.083245][T10784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.143937][T10784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.211761][T10898] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1375.297090][T10898] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1375.369776][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.378137][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.405973][T10898] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1375.485086][T10898] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1375.742979][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.750877][ T9015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.532896][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 1376.769455][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1376.776314][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1377.503322][T10745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.865662][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.847'. [ 1378.211407][T10898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.529078][T10898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.673856][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.681514][ T9000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.847022][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.854714][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.637536][T10784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.792366][T10745] veth0_vlan: entered promiscuous mode [ 1380.946223][T10745] veth1_vlan: entered promiscuous mode [ 1381.230410][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 1382.075247][T10745] veth0_macvtap: entered promiscuous mode [ 1382.362776][T10745] veth1_macvtap: entered promiscuous mode [ 1382.539088][T10898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.654099][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.856'. [ 1382.913355][T10745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.149896][T10745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.406945][ T79] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.434060][ T79] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.544209][ T79] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.603332][T10784] veth0_vlan: entered promiscuous mode [ 1383.644269][ T79] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.867472][T10784] veth1_vlan: entered promiscuous mode [ 1384.642390][T10784] veth0_macvtap: entered promiscuous mode [ 1384.756158][T10784] veth1_macvtap: entered promiscuous mode [ 1385.014063][T10784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.224663][T10784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.480153][ T6061] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.514694][ T6061] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.611254][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'. [ 1385.655307][ T6061] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.682867][ T6061] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.591896][T10898] veth0_vlan: entered promiscuous mode [ 1386.875239][T10898] veth1_vlan: entered promiscuous mode [ 1387.517439][T11148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.865'. [ 1387.520109][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 1387.608219][T10898] veth0_macvtap: entered promiscuous mode [ 1387.773809][T10898] veth1_macvtap: entered promiscuous mode [ 1388.101448][T10898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.332977][T10898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.563797][ T9012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.606795][ T9012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.705758][ T9021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.749297][ T9021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.007198][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 1392.261903][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.289257][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 1392.348427][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.693255][ T9019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.745658][ T9019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.603489][T11224] fuse: Unknown parameter 'group_i00000000000000000000' [ 1393.639124][T11227] netlink: 16 bytes leftover after parsing attributes in process `syz.7.148'. [ 1395.237452][ T9021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.320397][ T9021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.306076][ T9021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.317232][ T9021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.913842][T11272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.887'. [ 1399.788385][T11276] fuse: Unknown parameter 'group_i00000000000000000000' [ 1401.012118][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.9.891'. [ 1401.487456][ T9012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.556266][ T9012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.987112][ T9000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.047249][ T9000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.377491][ C0] ===================================================== [ 1403.385332][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 1403.394529][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1403.401172][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1403.408336][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1403.414680][ C0] sysvec_call_function_single+0x7c/0x90 [ 1403.421461][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1403.427944][ C0] _raw_spin_unlock_irqrestore+0x33/0x60 [ 1403.433908][ C0] snd_rawmidi_proceed+0x77b/0x820 [ 1403.439388][ C0] snd_vmidi_output_work+0x12e/0x4a0 [ 1403.445012][ C0] process_scheduled_works+0xb21/0x1e30 [ 1403.450876][ C0] worker_thread+0xede/0x1580 [ 1403.455966][ C0] kthread+0x53f/0x600 [ 1403.460472][ C0] ret_from_fork+0x20f/0x910 [ 1403.465571][ C0] ret_from_fork_asm+0x1a/0x30 [ 1403.470642][ C0] [ 1403.473056][ C0] Local variable iter created at: [ 1403.478467][ C0] tdp_mmu_zap_leafs+0x52/0x6e0 [ 1403.483716][ C0] kvm_tdp_mmu_unmap_gfn_range+0x910/0xb50 [ 1403.489814][ C0] [ 1403.492250][ C0] CPU: 0 UID: 0 PID: 5991 Comm: kworker/0:2H Not tainted syzkaller #0 PREEMPT(full) [ 1403.501988][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1403.512196][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 1403.518902][ C0] ===================================================== [ 1403.526017][ C0] Disabling lock debugging due to kernel taint [ 1403.532805][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1403.539671][ C0] CPU: 0 UID: 0 PID: 5991 Comm: kworker/0:2H Tainted: G B syzkaller #0 PREEMPT(full) [ 1403.551453][ C0] Tainted: [B]=BAD_PAGE [ 1403.555984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1403.566284][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 1403.572980][ C0] Call Trace: [ 1403.576370][ C0] [ 1403.579341][ C0] __dump_stack+0x26/0x30 [ 1403.583874][ C0] dump_stack_lvl+0x50/0x1c0 [ 1403.588659][ C0] ? dump_stack+0x12/0x25 [ 1403.593197][ C0] dump_stack+0x1e/0x25 [ 1403.597551][ C0] vpanic+0x7b4/0x1430 [ 1403.602123][ C0] panic+0x15d/0x160 [ 1403.606458][ C0] kmsan_report+0x31a/0x320 [ 1403.611230][ C0] ? __msan_warning+0x1b/0x30 [ 1403.616114][ C0] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 1403.622916][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1403.630326][ C0] ? __sysvec_call_function_single+0x4b/0x3e0 [ 1403.636787][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 1403.642935][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 1403.649298][ C0] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 1403.655342][ C0] ? snd_rawmidi_proceed+0x77b/0x820 [ 1403.660912][ C0] ? snd_vmidi_output_work+0x12e/0x4a0 [ 1403.666607][ C0] ? process_scheduled_works+0xb21/0x1e30 [ 1403.672645][ C0] ? worker_thread+0xede/0x1580 [ 1403.677789][ C0] ? kthread+0x53f/0x600 [ 1403.682281][ C0] ? ret_from_fork+0x20f/0x910 [ 1403.687248][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1403.692421][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1403.697798][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1403.704369][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1403.710654][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1403.716186][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1403.722419][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1403.727857][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1403.734508][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1403.739890][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1403.745950][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1403.751308][ C0] __msan_warning+0x1b/0x30 [ 1403.756129][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1403.762574][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1403.768731][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1403.775887][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1403.782016][ C0] sysvec_call_function_single+0x7c/0x90 [ 1403.787978][ C0] [ 1403.791023][ C0] [ 1403.794066][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1403.800245][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x33/0x60 [ 1403.806910][ C0] Code: 56 53 48 89 f3 49 89 fe e8 5a 02 a2 f1 4c 89 f7 e8 92 f5 a1 f1 c6 00 00 41 c6 06 00 f7 c3 00 02 00 00 74 01 fb be 04 00 00 00 <48> c7 c7 28 70 84 95 e8 a1 f7 a1 f1 65 ff 0d a2 45 7b 04 74 0a 5b [ 1403.826804][ C0] RSP: 0018:ffff888068e6fa88 EFLAGS: 00000206 [ 1403.833054][ C0] RAX: ffff88811722d1b8 RBX: 0000000000000286 RCX: 0000000000574ee1 [ 1403.841262][ C0] RDX: ffff88811762d1b8 RSI: 0000000000000004 RDI: ffff888117a2d1b8 [ 1403.849382][ C0] RBP: ffff888068e6fa98 R08: ffffea000000000f R09: 0000000000000000 [ 1403.857673][ C0] R10: ffff888237c90028 R11: 0000000000000001 R12: 0000000000000000 [ 1403.865885][ C0] R13: 0000000000001000 R14: ffff888117a2d1b8 R15: ffff888050ed2c78 [ 1403.874053][ C0] ? _raw_spin_unlock_irqrestore+0x1e/0x60 [ 1403.880361][ C0] snd_rawmidi_proceed+0x77b/0x820 [ 1403.885725][ C0] snd_vmidi_output_work+0x12e/0x4a0 [ 1403.891249][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1403.896782][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1403.902924][ C0] process_scheduled_works+0xb21/0x1e30 [ 1403.908755][ C0] worker_thread+0xede/0x1580 [ 1403.913935][ C0] kthread+0x53f/0x600 [ 1403.918222][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1403.923563][ C0] ? __pfx_kthread+0x10/0x10 [ 1403.928380][ C0] ret_from_fork+0x20f/0x910 [ 1403.933160][ C0] ? __switch_to+0x51c/0x750 [ 1403.938181][ C0] ? __pfx_kthread+0x10/0x10 [ 1403.942992][ C0] ret_from_fork_asm+0x1a/0x30 [ 1403.948100][ C0] [ 1403.951761][ C0] Kernel Offset: disabled [ 1403.956233][ C0] Rebooting in 86400 seconds..