last executing test programs: 6.388730608s ago: executing program 0 (id=428): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 6.202579395s ago: executing program 0 (id=429): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 6.102810599s ago: executing program 0 (id=430): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = getpgrp(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x4387fe34834ef5c5, 0x58de4a6fa5deed3c, 0x1, 0x10, r2}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r4, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) 5.371546578s ago: executing program 1 (id=433): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 5.196971207s ago: executing program 1 (id=435): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c0002800600010001000000", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 4.93930657s ago: executing program 1 (id=436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 4.904110618s ago: executing program 0 (id=437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f00001d5000/0x1000)=nil, 0x1000, 0x2000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0f000000040000000400000004000000010802", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000005f3be9f41b41af667de62249ee14c10a17e7e59ac129c368183a6d9f29626ca8a4283c41cf2c43e3260043d5188e1f6eaf04b96bd36f50995fe76b64d03d640d9408656ed6bbfeb2e7aa74ebb8def70152a3d86f832bf02ea329bb12dcf28fa6b505816559a0dae199c16810fc8c57eb9c52ffcb5e7c5daca9923e733ace518454b03b571e2d4d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100133536b20cb042101b3bc0402030109021200015a6d5b8d5043"], 0x0) 4.672868856s ago: executing program 1 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 3.981689553s ago: executing program 1 (id=442): openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000020601040000000000000000060000020500050002000000050004000000000014"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) 3.764732859s ago: executing program 3 (id=444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000017c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4055}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.665181812s ago: executing program 2 (id=445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 3.511980722s ago: executing program 3 (id=446): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000010000104d100700080000000000000", @ANYRES32=0x0, @ANYBLOB="136f020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="05ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3.396081396s ago: executing program 2 (id=447): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgrp(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) 2.898133268s ago: executing program 3 (id=448): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x5a8}, 0x1, 0x0, 0x0, 0x880}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000"], 0x48) r5 = getpgrp(0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)={0x248, 0x3, 0x7, 0x500, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x6}, [@nested={0xfe, 0x27, 0x0, 0x1, [@typed={0xa, 0x9e, 0x0, 0x0, @str='^!+{#\x00'}, @generic="5c56e77e18b816791d172adff2c16117d668e353303f7bb3d336ddd4c15b29c713fa9f7d0df5b975b5b30732eae9becd9904407b89", @generic="11f659180d8153295976fd7a0542ea8abcb4b48872a00df7baa7242aa30ccc2b0f66e65c951699ba9075a2c1e1d0563fb764850810d157d95d18347970e893f6ded14937fd4ebe0d6522589a4e8d2e90fe4722397d7d37803eb0580cec817bd715a3b7d2b3e149bde5e80ccb10496c3cb2a309e8504fa6f87455504e50a692810932a376ac01ac728028f22e84afb941c1ce8b2d9c19559a40313dd67e56e4f5e6c6a1ff27711d3a1c5915cb2c", @typed={0x8, 0x1d, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x9c}]}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x2}, @typed={0x5, 0xf6, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x51, 0x0, 0x0, @u32=0xff}, @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @typed={0x9, 0xfa, 0x0, 0x0, @str='&+/&\x00'}, @generic="104d9d342d6a351318c6ba8f6f298cf5499bb94a08431413f1b9fb71f72f61c4a60cdc9ce482b676bb8952259c0ebe8dcac30a20f860b2a88fa244d0798e3163af3b4d49414f4c1060ccef48d0ed49aa6c6a538fcd9ccf0d04c9b2e4dc3659497ae30693ecc137d00326eb6793e42412621682236e3e24eb4cf96a1186acab0b0531137ab8cd8b84a7e8b0ee40faa20030d3ba1cac8a2674bf3f164ebfec8c4293e83cce19cacfb825b326d686f84d5ee248481f06f85361420e42dbabe0cd2deecd5a80a457976ce14e34e4e9275cfc6a9c0c3f765ea8df1c5af3c61fe73ab4673047ce23533b62405e41c0dfa531ec38d500773914"]}, 0x248}, 0x1, 0x0, 0x0, 0x41}, 0x8900) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendfile(r4, r4, 0x0, 0x200000) 2.387114199s ago: executing program 2 (id=449): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 2.153204751s ago: executing program 2 (id=450): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000002", @ANYRES16, @ANYBLOB="00082dbd7000fddbdf258300000094051180900505803400008024000280080026006c09000008009f000100000008002201cd0000000800a000080000000a000100080211000000000098040080b401038004000200840001800c0001800400080004000c00140001800500060005000000050005"], 0x5a8}, 0x1, 0x0, 0x0, 0x880}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000"], 0x48) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)={0x24c, 0x3, 0x7, 0x500, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x6}, [@nested={0xfe, 0x27, 0x0, 0x1, [@typed={0xa, 0x9e, 0x0, 0x0, @str='^!+{#\x00'}, @generic="5c56e77e18b816791d172adff2c16117d668e353303f7bb3d336ddd4c15b29c713fa9f7d0df5b975b5b30732eae9becd9904407b89", @generic="11f659180d8153295976fd7a0542ea8abcb4b48872a00df7baa7242aa30ccc2b0f66e65c951699ba9075a2c1e1d0563fb764850810d157d95d18347970e893f6ded14937fd4ebe0d6522589a4e8d2e90fe4722397d7d37803eb0580cec817bd715a3b7d2b3e149bde5e80ccb10496c3cb2a309e8504fa6f87455504e50a692810932a376ac01ac728028f22e84afb941c1ce8b2d9c19559a40313dd67e56e4f5e6c6a1ff27711d3a1c5915cb2c", @typed={0x8, 0x1d, 0x0, 0x0, @pid}, @nested={0x4, 0x9c}]}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x2}, @typed={0x5, 0xf6, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x51, 0x0, 0x0, @u32=0xff}, @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @typed={0x9, 0xfa, 0x0, 0x0, @str='&+/&\x00'}, @generic="0ffe3c7a", @generic="104d9d342d6a351318c6ba8f6f298cf5499bb94a08431413f1b9fb71f72f61c4a60cdc9ce482b676bb8952259c0ebe8dcac30a20f860b2a88fa244d0798e3163af3b4d49414f4c1060ccef48d0ed49aa6c6a538fcd9ccf0d04c9b2e4dc3659497ae30693ecc137d00326eb6793e42412621682236e3e24eb4cf96a1186acab0b0531137ab8cd8b84a7e8b0ee40faa20030d3ba1cac8a2674bf3f164ebfec8c4293e83cce19cacfb825b326d686f84d5ee248481f06f85361420e42dbabe0cd2deecd5a80a457976ce14e34e4e9275cfc6a9c0c3f765ea8df1c5af3c61fe73ab4673047ce23533b62405e41c0dfa531ec38d500773914"]}, 0x24c}, 0x1, 0x0, 0x0, 0x41}, 0x8900) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendfile(r3, r3, 0x0, 0x200000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0xfffffffe, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) 1.818477867s ago: executing program 3 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', &(0x7f0000000240)={0x2002, 0x0, 0x28}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="68000000000905040000000000000000020000000900010073797a3028000000140002800600010000ff0000050002000600000008000500000000002c0004800800010200000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x24000080) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000780)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f0000000800)=""/196, 0xc4}, {&(0x7f0000000900)=""/115, 0x73}], 0x2, &(0x7f00000009c0)=""/245, 0xf5}, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x13, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000009000), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) 1.31610628s ago: executing program 0 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f00001d5000/0x1000)=nil, 0x1000, 0x2000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) flock(r1, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0f000000040000000400000004000000010802", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000005f3be9f41b41af667de62249ee14c10a17e7e59ac129c368183a6d9f29626ca8a4283c41cf2c43e3260043d5188e1f6eaf04b96bd36f50995fe76b64d03d640d9408656ed6bbfeb2e7aa74ebb8def70152a3d86f832bf02ea329bb12dcf28fa6b505816559a0dae199c16810fc8c57eb9c52ffcb5e7c5daca9923e733ace518454b03b571e2d4d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100133536b20cb042101b3bc0402030109021200015a6d5b8d5043"], 0x0) 1.236233042s ago: executing program 2 (id=453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f00001d5000/0x1000)=nil, 0x1000, 0x2000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) flock(r1, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0f000000040000000400000004000000010802", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000005f3be9f41b41af667de62249ee14c10a17e7e59ac129c368183a6d9f29626ca8a4283c41cf2c43e3260043d5188e1f6eaf04b96bd36f50995fe76b64d03d640d9408656ed6bbfeb2e7aa74ebb8def70152a3d86f832bf02ea329bb12dcf28fa6b505816559a0dae199c16810fc8c57eb9c52ffcb5e7c5daca9923e733ace518454b03b571e2d4d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100133536b20cb042101b3bc0402030109021200015a6d5b8d5043"], 0x0) 1.132489461s ago: executing program 3 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000017c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4055}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 952.096519ms ago: executing program 3 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 734.667713ms ago: executing program 2 (id=456): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) 712.999856ms ago: executing program 1 (id=457): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 0s ago: executing program 0 (id=458): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3855' (ED25519) to the list of known hosts. [ 35.433141][ T5691] cgroup: Unknown subsys name 'net' [ 35.584063][ T5691] cgroup: Unknown subsys name 'cpuset' [ 35.588039][ T5691] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.647859][ T5691] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.410353][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.411472][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.411859][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.412645][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.412958][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.416308][ T5752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.422813][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.424170][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 41.428725][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.428992][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 41.429200][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.430050][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.431199][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.432440][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 41.432734][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.433651][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.433806][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.433954][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 41.434559][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.435290][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 42.123865][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.123920][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.123981][ T5737] bridge_slave_0: entered allmulticast mode [ 42.124759][ T5737] bridge_slave_0: entered promiscuous mode [ 42.143704][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.143785][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.143889][ T5737] bridge_slave_1: entered allmulticast mode [ 42.145425][ T5737] bridge_slave_1: entered promiscuous mode [ 42.208997][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.244806][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.343881][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.344013][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.344110][ T5738] bridge_slave_0: entered allmulticast mode [ 42.345079][ T5738] bridge_slave_0: entered promiscuous mode [ 42.347460][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.347531][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.347597][ T5738] bridge_slave_1: entered allmulticast mode [ 42.348467][ T5738] bridge_slave_1: entered promiscuous mode [ 42.355192][ T5737] team0: Port device team_slave_0 added [ 42.368495][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.368581][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.368683][ T5735] bridge_slave_0: entered allmulticast mode [ 42.369464][ T5735] bridge_slave_0: entered promiscuous mode [ 42.378729][ T5737] team0: Port device team_slave_1 added [ 42.394986][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.395043][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.395103][ T5736] bridge_slave_0: entered allmulticast mode [ 42.396081][ T5736] bridge_slave_0: entered promiscuous mode [ 42.397439][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.397521][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.397622][ T5735] bridge_slave_1: entered allmulticast mode [ 42.399121][ T5735] bridge_slave_1: entered promiscuous mode [ 42.417276][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.426029][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.426079][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.426143][ T5736] bridge_slave_1: entered allmulticast mode [ 42.426869][ T5736] bridge_slave_1: entered promiscuous mode [ 42.428110][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.428124][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.428145][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.436581][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.436598][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.436620][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.438007][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.467195][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.468741][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.501249][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.513036][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.515080][ T5738] team0: Port device team_slave_0 added [ 42.547461][ T5736] team0: Port device team_slave_0 added [ 42.549460][ T5738] team0: Port device team_slave_1 added [ 42.551116][ T5736] team0: Port device team_slave_1 added [ 42.566476][ T5737] hsr_slave_0: entered promiscuous mode [ 42.567007][ T5737] hsr_slave_1: entered promiscuous mode [ 42.569179][ T5735] team0: Port device team_slave_0 added [ 42.580271][ T5735] team0: Port device team_slave_1 added [ 42.614538][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.614550][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.614564][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.615367][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.615381][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.615399][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.616101][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.616109][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.616123][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.634351][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.634367][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.634381][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.635489][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.635509][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.635531][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.658925][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.658937][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.658952][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.741098][ T5736] hsr_slave_0: entered promiscuous mode [ 42.742054][ T5736] hsr_slave_1: entered promiscuous mode [ 42.742573][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 42.742639][ T5736] Cannot create hsr debugfs directory [ 42.748227][ T5738] hsr_slave_0: entered promiscuous mode [ 42.749331][ T5738] hsr_slave_1: entered promiscuous mode [ 42.750796][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 42.750834][ T5738] Cannot create hsr debugfs directory [ 42.780220][ T5735] hsr_slave_0: entered promiscuous mode [ 42.780825][ T5735] hsr_slave_1: entered promiscuous mode [ 42.781285][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 42.781298][ T5735] Cannot create hsr debugfs directory [ 43.147872][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.159673][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.171694][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.178532][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.179331][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.185699][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.187351][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.191545][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.238970][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.245138][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.250476][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.256532][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.257384][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.260791][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.286891][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.291656][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.354204][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.358043][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.361346][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.364884][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.366671][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.372182][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.384236][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.387739][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.450719][ T5755] Bluetooth: hci2: command tx timeout [ 43.467194][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.471049][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.475731][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.478843][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.485255][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.491692][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.496261][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.502112][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.504634][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.529968][ T5749] Bluetooth: hci3: command tx timeout [ 43.530074][ T5755] Bluetooth: hci0: command tx timeout [ 43.540475][ T5755] Bluetooth: hci1: command tx timeout [ 43.543185][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.567209][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.567353][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.582198][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.582293][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.607831][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.645035][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.653625][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.665483][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.665633][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.673005][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.673073][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.694301][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.714774][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.714884][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.736255][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.736301][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.772924][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.804455][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.813406][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.813579][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.826241][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.826351][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.047639][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.062222][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.080420][ T5737] veth0_vlan: entered promiscuous mode [ 44.098664][ T5737] veth1_vlan: entered promiscuous mode [ 44.101514][ T5738] veth0_vlan: entered promiscuous mode [ 44.106440][ T5738] veth1_vlan: entered promiscuous mode [ 44.131082][ T5737] veth0_macvtap: entered promiscuous mode [ 44.134484][ T5737] veth1_macvtap: entered promiscuous mode [ 44.143464][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.148204][ T5738] veth0_macvtap: entered promiscuous mode [ 44.154455][ T5738] veth1_macvtap: entered promiscuous mode [ 44.158802][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.162930][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.177224][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.180588][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.197027][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.200290][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.232180][ T5736] veth0_vlan: entered promiscuous mode [ 44.262547][ T5736] veth1_vlan: entered promiscuous mode [ 44.312975][ T5735] veth0_vlan: entered promiscuous mode [ 44.320074][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.320092][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.335365][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.335383][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.356787][ T5735] veth1_vlan: entered promiscuous mode [ 44.370132][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.370148][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.375315][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.375330][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.377120][ T5736] veth0_macvtap: entered promiscuous mode [ 44.383118][ T5736] veth1_macvtap: entered promiscuous mode [ 44.402396][ T5735] veth0_macvtap: entered promiscuous mode [ 44.405095][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.407090][ T5735] veth1_macvtap: entered promiscuous mode [ 44.412800][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.430393][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.438119][ T5738] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 44.457616][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.462990][ T5738] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 44.481328][ T5738] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 44.487744][ T5738] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 44.498233][ T5738] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 44.533706][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.533718][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.561404][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.561733][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.561965][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.562509][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.562523][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.588612][ T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.588631][ T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.588768][ T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.588779][ T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.619799][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620019][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620038][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620055][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620072][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620089][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620106][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620122][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620139][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620156][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620173][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620190][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.644078][ T5891] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2'. [ 44.647697][ T5891] eql: entered promiscuous mode [ 45.529597][ T5755] Bluetooth: hci2: command tx timeout [ 45.598178][ T5908] netlink: 25 bytes leftover after parsing attributes in process `syz.1.7'. [ 45.619759][ T5749] Bluetooth: hci0: command tx timeout [ 45.619781][ T5749] Bluetooth: hci3: command tx timeout [ 45.622764][ T5755] Bluetooth: hci1: command tx timeout [ 45.898459][ T5910] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 45.902389][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 45.902879][ T5910] 8021q: VLANs not supported on ip6_vti0 [ 45.945155][ T5916] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 45.945680][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 45.946404][ T5916] 8021q: VLANs not supported on ip6_vti0 [ 46.073020][ T5920] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 46.079017][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 46.079232][ T5920] 8021q: VLANs not supported on ip6tnl0 [ 46.341678][ T5930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 46.369886][ T5846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 46.386630][ T5932] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 46.387528][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 46.528253][ T5846] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 46.544839][ T5846] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.545036][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.591887][ T5937] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 46.600723][ T5846] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 46.608349][ T5846] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 46.608384][ T5846] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 46.649443][ T5846] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 46.655090][ T5846] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 46.671879][ T5846] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 46.676850][ T5846] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 46.676887][ T5846] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 46.678600][ T5846] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 46.845351][ T5940] netlink: 'syz.1.21': attribute type 1 has an invalid length. [ 46.847004][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 46.847168][ T5940] 8021q: VLANs not supported on vcan0 [ 46.871960][ T5942] sl0: header compression turned on [ 47.609778][ T5752] Bluetooth: hci2: command tx timeout [ 47.690772][ T5752] Bluetooth: hci3: command tx timeout [ 47.690826][ T5752] Bluetooth: hci1: command tx timeout [ 47.690846][ T5752] Bluetooth: hci0: command tx timeout [ 48.484452][ T5985] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 48.614774][ T5983] kAFS: No cell specified [ 48.872670][ T5993] netlink: 25 bytes leftover after parsing attributes in process `syz.1.27'. [ 48.875855][ T5993] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.27'. [ 48.875984][ T5993] 0猉功D龌: renamed from eql [ 48.886967][ T5993] 0猉功D龌: remember to turn off Van-Jacobson compression on your slave devices [ 48.886998][ T5993] 0猉功D龌: left promiscuous mode [ 48.887012][ T5993] 0猉功D龌: entered allmulticast mode [ 49.722563][ T5749] Bluetooth: hci2: command tx timeout [ 49.770592][ T5749] Bluetooth: hci0: command tx timeout [ 49.770710][ T5749] Bluetooth: hci1: command tx timeout [ 49.770759][ T5749] Bluetooth: hci3: command tx timeout [ 49.926093][ T5466] usb 8-1: USB disconnect, device number 2 [ 49.953972][ T5466] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 49.977328][ T5466] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 49.977890][ T5466] keyspan 8-1:1.0: device disconnected [ 50.015417][ T6003] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 50.016922][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 50.244736][ T6012] netlink: 'syz.2.34': attribute type 1 has an invalid length. [ 50.245730][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 50.495933][ T6019] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 50.505369][ T6018] null_blk: rnullb0: using native zone append [ 50.614337][ T6018] null_blk: disk rnullb0 created [ 50.712799][ T6025] kAFS: No cell specified [ 50.715888][ T6029] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 50.719864][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 50.754737][ T6029] team0: Port device bridge2 added [ 51.208841][ T5752] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 51.208862][ T5752] CPU: 0 UID: 0 PID: 5752 Comm: kworker/u34:5 Not tainted syzkaller #0 PREEMPT(full) [ 51.208899][ T5752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.208912][ T5752] Workqueue: hci3 hci_rx_work [ 51.208947][ T5752] Call Trace: [ 51.208953][ T5752] [ 51.208960][ T5752] dump_stack_lvl+0x100/0x190 [ 51.208981][ T5752] sysfs_warn_dup.cold+0x1c/0x28 [ 51.209000][ T5752] sysfs_create_dir_ns+0x24b/0x2b0 [ 51.209023][ T5752] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 51.209038][ T5752] ? find_held_lock+0x2b/0x80 [ 51.209052][ T5752] ? kobject_add_internal+0x25f/0x930 [ 51.209072][ T5752] ? kobject_add_internal+0x25f/0x930 [ 51.209092][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 51.209105][ T5752] kobject_add_internal+0x2c8/0x930 [ 51.209126][ T5752] kobject_add+0x16a/0x1e0 [ 51.209143][ T5752] ? __pfx_kobject_add+0x10/0x10 [ 51.209159][ T5752] ? class_to_subsys+0x10f/0x150 [ 51.209175][ T5752] ? kobject_put+0xb9/0x640 [ 51.209190][ T5752] ? _raw_spin_unlock+0x28/0x50 [ 51.209205][ T5752] device_add+0x294/0x1970 [ 51.209218][ T5752] ? __pfx_dev_set_name+0x10/0x10 [ 51.209232][ T5752] ? __pfx_device_add+0x10/0x10 [ 51.209245][ T5752] ? mgmt_send_event_skb+0x2fb/0x460 [ 51.209260][ T5752] hci_conn_add_sysfs+0x1a3/0x260 [ 51.209275][ T5752] le_conn_complete_evt+0x122f/0x2130 [ 51.209296][ T5752] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 51.209313][ T5752] ? hci_event_packet+0x186/0xcd0 [ 51.209334][ T5752] hci_le_conn_complete_evt+0x23c/0x3a0 [ 51.209352][ T5752] ? skb_pull_data+0x15f/0x1e0 [ 51.209368][ T5752] hci_le_meta_evt+0x34a/0x5f0 [ 51.209380][ T5752] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 51.209401][ T5752] hci_event_packet+0x51c/0xcd0 [ 51.209419][ T5752] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 51.209431][ T5752] ? __pfx_hci_event_packet+0x10/0x10 [ 51.209451][ T5752] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.209468][ T5752] hci_rx_work+0x451/0xfc0 [ 51.209487][ T5752] process_one_work+0xac7/0x1b10 [ 51.209508][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 51.209525][ T5752] ? lock_acquire+0x1d1/0x380 [ 51.209546][ T5752] ? __pfx_hci_rx_work+0x10/0x10 [ 51.209564][ T5752] worker_thread+0x5ef/0xe50 [ 51.209584][ T5752] ? kthread+0x13a/0x450 [ 51.209595][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 51.209609][ T5752] kthread+0x373/0x450 [ 51.209621][ T5752] ? __pfx_kthread+0x10/0x10 [ 51.209634][ T5752] ret_from_fork+0x730/0xd60 [ 51.209646][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 51.209658][ T5752] ? __switch_to+0x800/0x10f0 [ 51.209672][ T5752] ? __pfx_kthread+0x10/0x10 [ 51.209686][ T5752] ret_from_fork_asm+0x1a/0x30 [ 51.209704][ T5752] [ 51.220594][ T5752] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 51.220620][ T5752] Bluetooth: hci3: failed to register connection device [ 51.989917][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 53.326712][ T5749] Bluetooth: hci3: command 0x2016 tx timeout [ 53.937254][ T6070] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.986303][ T6073] smpboot: CPU 1 is now offline [ 54.188941][ T6074] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 55.291826][ T6093] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 55.293695][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 55.379597][ T5749] Bluetooth: hci3: command 0x2016 tx timeout [ 55.719624][ T5745] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.893114][ T5745] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 55.894965][ T5745] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.894989][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.898919][ T5745] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 55.899011][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 55.899038][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 55.901356][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 55.901392][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 55.903203][ T5745] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 55.906379][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 55.906415][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 55.907790][ T5745] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 55.949734][ T1478] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.100423][ T1478] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 56.101448][ T1478] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.101483][ T1478] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.109277][ T1478] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 56.126082][ T1478] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 56.126151][ T1478] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 56.127257][ T1478] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 56.127320][ T1478] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 56.137047][ T1478] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 56.151167][ T1478] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 56.151233][ T1478] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 56.157145][ T1478] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 56.330493][ T37] IPVS: starting estimator thread 0... [ 56.419662][ T6112] IPVS: using max 29 ests per chain, 69600 per kthread [ 56.459919][ T6116] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 56.562502][ T6116] kAFS: No cell specified [ 56.657322][ T6120] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 56.658181][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 56.789870][ T1160] IPVS: starting estimator thread 0... [ 56.879943][ T6122] IPVS: using max 30 ests per chain, 72000 per kthread [ 56.932340][ T6126] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 57.011481][ T6126] kAFS: No cell specified [ 57.822979][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 58.484079][ T6141] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.524142][ T5825] usb 6-1: USB disconnect, device number 2 [ 58.532205][ T5825] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 58.539330][ T5825] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 58.540184][ T5825] keyspan 6-1:1.0: device disconnected [ 58.629467][ T6141] kAFS: No cell specified [ 58.744993][ T5846] usb 7-1: USB disconnect, device number 2 [ 58.749059][ T5846] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 58.761177][ T5846] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 58.761995][ T5846] keyspan 7-1:1.0: device disconnected [ 58.950866][ T6147] sl0: header compression turned on [ 59.013279][ T6152] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 59.196773][ T6165] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 60.536234][ T5752] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 60.536258][ T5752] CPU: 2 UID: 0 PID: 5752 Comm: kworker/u34:5 Not tainted syzkaller #0 PREEMPT(full) [ 60.536282][ T5752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.536295][ T5752] Workqueue: hci1 hci_rx_work [ 60.536331][ T5752] Call Trace: [ 60.536338][ T5752] [ 60.536346][ T5752] dump_stack_lvl+0x100/0x190 [ 60.536378][ T5752] sysfs_warn_dup.cold+0x1c/0x28 [ 60.536410][ T5752] sysfs_create_dir_ns+0x24b/0x2b0 [ 60.536437][ T5752] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 60.536461][ T5752] ? find_held_lock+0x2b/0x80 [ 60.536483][ T5752] ? kobject_add_internal+0x25f/0x930 [ 60.536531][ T5752] ? kobject_add_internal+0x25f/0x930 [ 60.536565][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 60.536589][ T5752] kobject_add_internal+0x2c8/0x930 [ 60.536626][ T5752] kobject_add+0x16a/0x1e0 [ 60.536655][ T5752] ? __pfx_kobject_add+0x10/0x10 [ 60.536684][ T5752] ? class_to_subsys+0x10f/0x150 [ 60.536711][ T5752] ? kobject_put+0xb9/0x640 [ 60.536736][ T5752] ? _raw_spin_unlock+0x28/0x50 [ 60.536763][ T5752] device_add+0x294/0x1970 [ 60.536784][ T5752] ? __pfx_dev_set_name+0x10/0x10 [ 60.536808][ T5752] ? __pfx_device_add+0x10/0x10 [ 60.536829][ T5752] ? mgmt_send_event_skb+0x2fb/0x460 [ 60.536857][ T5752] hci_conn_add_sysfs+0x1a3/0x260 [ 60.536881][ T5752] le_conn_complete_evt+0x122f/0x2130 [ 60.536918][ T5752] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 60.536946][ T5752] ? hci_event_packet+0x186/0xcd0 [ 60.536990][ T5752] hci_le_conn_complete_evt+0x23c/0x3a0 [ 60.537024][ T5752] ? skb_pull_data+0x15f/0x1e0 [ 60.537053][ T5752] hci_le_meta_evt+0x34a/0x5f0 [ 60.537075][ T5752] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 60.537112][ T5752] hci_event_packet+0x51c/0xcd0 [ 60.537143][ T5752] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 60.537164][ T5752] ? __pfx_hci_event_packet+0x10/0x10 [ 60.537200][ T5752] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.537229][ T5752] hci_rx_work+0x451/0xfc0 [ 60.537265][ T5752] process_one_work+0xac7/0x1b10 [ 60.537302][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 60.537328][ T5752] ? lock_acquire+0x1d1/0x380 [ 60.537362][ T5752] ? __pfx_hci_rx_work+0x10/0x10 [ 60.537391][ T5752] worker_thread+0x5ef/0xe50 [ 60.537427][ T5752] ? kthread+0x13a/0x450 [ 60.537446][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 60.537468][ T5752] kthread+0x373/0x450 [ 60.537488][ T5752] ? __pfx_kthread+0x10/0x10 [ 60.537513][ T5752] ret_from_fork+0x730/0xd60 [ 60.537533][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 60.537553][ T5752] ? __switch_to+0x800/0x10f0 [ 60.537578][ T5752] ? __pfx_kthread+0x10/0x10 [ 60.537601][ T5752] ret_from_fork_asm+0x1a/0x30 [ 60.537633][ T5752] [ 60.538343][ T5752] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 60.538373][ T5752] Bluetooth: hci1: failed to register connection device [ 61.046146][ T6210] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.185424][ T6210] kAFS: No cell specified [ 61.999898][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.364930][ T35] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.436355][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.436376][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.436387][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.436407][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.572313][ T5749] Bluetooth: hci1: command 0x2016 tx timeout [ 63.045377][ T35] usb 5-1: config 0 descriptor?? [ 63.290184][ T6228] syz_tun: entered allmulticast mode [ 63.341377][ T6227] syz_tun: left allmulticast mode [ 64.146020][ T35] usbhid 5-1:0.0: can't add hid device: -71 [ 64.146084][ T35] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 64.389695][ T35] usb 5-1: USB disconnect, device number 2 [ 64.660368][ T5749] Bluetooth: hci1: command 0x2016 tx timeout [ 64.908143][ T6283] netlink: 25 bytes leftover after parsing attributes in process `syz.3.113'. [ 64.908502][ T6283] 0猉功D龌: entered promiscuous mode [ 64.908513][ T6283] 0猉功D龌: left allmulticast mode [ 64.943957][ T6287] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 65.166535][ T6287] kAFS: No cell specified [ 65.922950][ T6326] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 66.101219][ T5752] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 66.101235][ T5752] CPU: 3 UID: 0 PID: 5752 Comm: kworker/u34:5 Not tainted syzkaller #0 PREEMPT(full) [ 66.101249][ T5752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.101257][ T5752] Workqueue: hci0 hci_rx_work [ 66.101279][ T5752] Call Trace: [ 66.101283][ T5752] [ 66.101300][ T5752] dump_stack_lvl+0x100/0x190 [ 66.101319][ T5752] sysfs_warn_dup.cold+0x1c/0x28 [ 66.101338][ T5752] sysfs_create_dir_ns+0x24b/0x2b0 [ 66.101354][ T5752] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 66.101374][ T5752] ? find_held_lock+0x2b/0x80 [ 66.101388][ T5752] ? kobject_add_internal+0x25f/0x930 [ 66.101420][ T5752] ? kobject_add_internal+0x25f/0x930 [ 66.101439][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.101453][ T5752] kobject_add_internal+0x2c8/0x930 [ 66.101474][ T5752] kobject_add+0x16a/0x1e0 [ 66.101491][ T5752] ? __pfx_kobject_add+0x10/0x10 [ 66.101507][ T5752] ? class_to_subsys+0x10f/0x150 [ 66.101523][ T5752] ? kobject_put+0xb9/0x640 [ 66.101539][ T5752] ? _raw_spin_unlock+0x28/0x50 [ 66.101555][ T5752] device_add+0x294/0x1970 [ 66.101567][ T5752] ? __pfx_dev_set_name+0x10/0x10 [ 66.101582][ T5752] ? __pfx_device_add+0x10/0x10 [ 66.101594][ T5752] ? mgmt_send_event_skb+0x2fb/0x460 [ 66.101610][ T5752] hci_conn_add_sysfs+0x1a3/0x260 [ 66.101624][ T5752] le_conn_complete_evt+0x122f/0x2130 [ 66.101646][ T5752] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 66.101663][ T5752] ? hci_event_packet+0x186/0xcd0 [ 66.101684][ T5752] hci_le_conn_complete_evt+0x23c/0x3a0 [ 66.101704][ T5752] ? skb_pull_data+0x15f/0x1e0 [ 66.101720][ T5752] hci_le_meta_evt+0x34a/0x5f0 [ 66.101732][ T5752] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 66.101752][ T5752] hci_event_packet+0x51c/0xcd0 [ 66.101770][ T5752] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 66.101782][ T5752] ? __pfx_hci_event_packet+0x10/0x10 [ 66.101802][ T5752] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.101819][ T5752] hci_rx_work+0x451/0xfc0 [ 66.101838][ T5752] process_one_work+0xac7/0x1b10 [ 66.101860][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 66.101875][ T5752] ? lock_acquire+0x1d1/0x380 [ 66.101895][ T5752] ? __pfx_hci_rx_work+0x10/0x10 [ 66.101913][ T5752] worker_thread+0x5ef/0xe50 [ 66.101933][ T5752] ? kthread+0x13a/0x450 [ 66.101945][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 66.101958][ T5752] kthread+0x373/0x450 [ 66.101970][ T5752] ? __pfx_kthread+0x10/0x10 [ 66.101983][ T5752] ret_from_fork+0x730/0xd60 [ 66.101995][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 66.102007][ T5752] ? __switch_to+0x800/0x10f0 [ 66.102021][ T5752] ? __pfx_kthread+0x10/0x10 [ 66.102034][ T5752] ret_from_fork_asm+0x1a/0x30 [ 66.102053][ T5752] [ 66.102453][ T5752] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 66.102472][ T5752] Bluetooth: hci0: failed to register connection device [ 66.703150][ T5752] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 66.703167][ T5752] CPU: 2 UID: 0 PID: 5752 Comm: kworker/u34:5 Not tainted syzkaller #0 PREEMPT(full) [ 66.703182][ T5752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.703190][ T5752] Workqueue: hci0 hci_rx_work [ 66.703213][ T5752] Call Trace: [ 66.703218][ T5752] [ 66.703222][ T5752] dump_stack_lvl+0x100/0x190 [ 66.703240][ T5752] sysfs_warn_dup.cold+0x1c/0x28 [ 66.703258][ T5752] sysfs_create_dir_ns+0x24b/0x2b0 [ 66.703274][ T5752] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 66.703289][ T5752] ? find_held_lock+0x2b/0x80 [ 66.703303][ T5752] ? kobject_add_internal+0x25f/0x930 [ 66.703320][ T5752] ? kobject_add_internal+0x25f/0x930 [ 66.703338][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.703351][ T5752] kobject_add_internal+0x2c8/0x930 [ 66.703371][ T5752] kobject_add+0x16a/0x1e0 [ 66.703389][ T5752] ? __pfx_kobject_add+0x10/0x10 [ 66.703406][ T5752] ? class_to_subsys+0x10f/0x150 [ 66.703422][ T5752] ? kobject_put+0xb9/0x640 [ 66.703440][ T5752] ? _raw_spin_unlock+0x28/0x50 [ 66.703457][ T5752] device_add+0x294/0x1970 [ 66.703471][ T5752] ? __pfx_dev_set_name+0x10/0x10 [ 66.703486][ T5752] ? __pfx_device_add+0x10/0x10 [ 66.703501][ T5752] ? mgmt_send_event_skb+0x2fb/0x460 [ 66.703518][ T5752] hci_conn_add_sysfs+0x1a3/0x260 [ 66.703533][ T5752] le_conn_complete_evt+0x122f/0x2130 [ 66.703557][ T5752] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 66.703575][ T5752] ? hci_event_packet+0x186/0xcd0 [ 66.703596][ T5752] hci_le_conn_complete_evt+0x23c/0x3a0 [ 66.703615][ T5752] ? skb_pull_data+0x15f/0x1e0 [ 66.703631][ T5752] hci_le_meta_evt+0x34a/0x5f0 [ 66.703643][ T5752] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 66.703662][ T5752] hci_event_packet+0x51c/0xcd0 [ 66.703680][ T5752] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 66.703692][ T5752] ? __pfx_hci_event_packet+0x10/0x10 [ 66.703712][ T5752] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.703733][ T5752] hci_rx_work+0x451/0xfc0 [ 66.703760][ T5752] process_one_work+0xac7/0x1b10 [ 66.703794][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 66.703820][ T5752] ? lock_acquire+0x1d1/0x380 [ 66.703875][ T5752] ? __pfx_hci_rx_work+0x10/0x10 [ 66.703903][ T5752] worker_thread+0x5ef/0xe50 [ 66.703942][ T5752] ? kthread+0x13a/0x450 [ 66.703962][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 66.703983][ T5752] kthread+0x373/0x450 [ 66.704013][ T5752] ? __pfx_kthread+0x10/0x10 [ 66.704034][ T5752] ret_from_fork+0x730/0xd60 [ 66.704051][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 66.704070][ T5752] ? __switch_to+0x800/0x10f0 [ 66.704095][ T5752] ? __pfx_kthread+0x10/0x10 [ 66.704113][ T5752] ret_from_fork_asm+0x1a/0x30 [ 66.704132][ T5752] [ 66.704172][ T5752] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 66.704191][ T5752] Bluetooth: hci0: failed to register connection device [ 66.801205][ T5752] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 66.801221][ T5752] CPU: 2 UID: 0 PID: 5752 Comm: kworker/u34:5 Not tainted syzkaller #0 PREEMPT(full) [ 66.801235][ T5752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.801243][ T5752] Workqueue: hci2 hci_rx_work [ 66.801273][ T5752] Call Trace: [ 66.801279][ T5752] [ 66.801286][ T5752] dump_stack_lvl+0x100/0x190 [ 66.801314][ T5752] sysfs_warn_dup.cold+0x1c/0x28 [ 66.801340][ T5752] sysfs_create_dir_ns+0x24b/0x2b0 [ 66.801367][ T5752] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 66.801389][ T5752] ? find_held_lock+0x2b/0x80 [ 66.801410][ T5752] ? kobject_add_internal+0x25f/0x930 [ 66.801445][ T5752] ? kobject_add_internal+0x25f/0x930 [ 66.801478][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.801502][ T5752] kobject_add_internal+0x2c8/0x930 [ 66.801536][ T5752] kobject_add+0x16a/0x1e0 [ 66.801565][ T5752] ? __pfx_kobject_add+0x10/0x10 [ 66.801600][ T5752] ? device_add+0x253/0x1970 [ 66.801624][ T5752] device_add+0x294/0x1970 [ 66.801639][ T5752] ? __pfx_dev_set_name+0x10/0x10 [ 66.801654][ T5752] ? __pfx_device_add+0x10/0x10 [ 66.801666][ T5752] ? mgmt_send_event_skb+0x2fb/0x460 [ 66.801682][ T5752] hci_conn_add_sysfs+0x1a3/0x260 [ 66.801696][ T5752] le_conn_complete_evt+0x122f/0x2130 [ 66.801731][ T5752] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 66.801762][ T5752] ? hci_event_packet+0x186/0xcd0 [ 66.801797][ T5752] hci_le_conn_complete_evt+0x23c/0x3a0 [ 66.801826][ T5752] ? skb_pull_data+0x15f/0x1e0 [ 66.801851][ T5752] hci_le_meta_evt+0x34a/0x5f0 [ 66.801871][ T5752] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 66.801901][ T5752] hci_event_packet+0x51c/0xcd0 [ 66.801928][ T5752] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 66.801948][ T5752] ? __pfx_hci_event_packet+0x10/0x10 [ 66.801978][ T5752] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.802006][ T5752] hci_rx_work+0x451/0xfc0 [ 66.802038][ T5752] process_one_work+0xac7/0x1b10 [ 66.802074][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 66.802102][ T5752] ? lock_acquire+0x1d1/0x380 [ 66.802136][ T5752] ? __pfx_hci_rx_work+0x10/0x10 [ 66.802168][ T5752] worker_thread+0x5ef/0xe50 [ 66.802203][ T5752] ? kthread+0x13a/0x450 [ 66.802223][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 66.802247][ T5752] kthread+0x373/0x450 [ 66.802268][ T5752] ? __pfx_kthread+0x10/0x10 [ 66.802291][ T5752] ret_from_fork+0x730/0xd60 [ 66.802313][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 66.802333][ T5752] ? __switch_to+0x800/0x10f0 [ 66.802358][ T5752] ? __pfx_kthread+0x10/0x10 [ 66.802381][ T5752] ret_from_fork_asm+0x1a/0x30 [ 66.802415][ T5752] [ 66.802447][ T5752] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 66.802476][ T5752] Bluetooth: hci2: failed to register connection device [ 66.916451][ T6354] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.133'. [ 66.916500][ T6354] 1猉功D龌: renamed from 00猉功D龌 [ 66.920334][ T6354] 1猉功D龌: remember to turn off Van-Jacobson compression on your slave devices [ 66.920354][ T6354] 1猉功D龌: left promiscuous mode [ 66.920362][ T6354] 1猉功D龌: entered allmulticast mode [ 66.926142][ T6355] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.017902][ T6355] kAFS: No cell specified [ 67.053699][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.053737][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.510887][ T6368] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.623708][ T6368] kAFS: No cell specified [ 67.692059][ T6372] Zero length message leads to an empty skb [ 67.693246][ T6372] syzkaller0: entered promiscuous mode [ 67.693262][ T6372] syzkaller0: entered allmulticast mode [ 67.896498][ T6380] syzkaller0: entered promiscuous mode [ 67.896515][ T6380] syzkaller0: entered allmulticast mode [ 68.029657][ T5745] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.179642][ T5752] Bluetooth: hci0: command 0x2016 tx timeout [ 68.181071][ T5745] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 68.181967][ T5745] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.181989][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.188097][ T5745] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 68.188241][ T5745] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 68.188269][ T5745] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 68.189593][ T5745] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.189627][ T5745] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 68.190881][ T5745] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 68.192602][ T5745] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 68.192635][ T5745] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 68.193967][ T5745] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 68.589656][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.740388][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.741312][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.741336][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.741354][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.741387][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.743484][ T58] usb 7-1: config 0 descriptor?? [ 68.819575][ T5752] Bluetooth: hci2: command 0x2016 tx timeout [ 68.962469][ T58] usbhid 7-1:0.0: can't add hid device: -71 [ 68.962542][ T58] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 68.964619][ T58] usb 7-1: USB disconnect, device number 3 [ 69.428597][ T63] IPVS: starting estimator thread 0... [ 69.510462][ T6398] IPVS: using max 42 ests per chain, 100800 per kthread [ 70.220307][ T6409] syzkaller0: entered promiscuous mode [ 70.220323][ T6409] syzkaller0: entered allmulticast mode [ 70.259609][ T5752] Bluetooth: hci0: command 0x2016 tx timeout [ 70.265561][ T854] cfg80211: failed to load regulatory.db [ 70.395860][ T6407] kAFS: No cell specified [ 70.902017][ T5755] Bluetooth: hci2: command 0x2016 tx timeout [ 71.643260][ T854] usb 5-1: USB disconnect, device number 3 [ 71.647440][ T854] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 71.660299][ T854] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 71.660622][ T854] keyspan 5-1:1.0: device disconnected [ 71.939757][ T5854] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.100862][ T5854] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.101813][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.101836][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.101853][ T5854] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.101882][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.107615][ T5854] usb 6-1: config 0 descriptor?? [ 72.239095][ T6430] syzkaller0: entered promiscuous mode [ 72.239112][ T6430] syzkaller0: entered allmulticast mode [ 72.328412][ T6420] syz_tun: entered allmulticast mode [ 72.329672][ T5752] Bluetooth: hci0: command 0x2016 tx timeout [ 72.340838][ T6419] syz_tun: left allmulticast mode [ 72.347670][ T5854] usbhid 6-1:0.0: can't add hid device: -71 [ 72.347750][ T5854] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 72.368300][ T5854] usb 6-1: USB disconnect, device number 3 [ 72.568632][ T6441] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 72.689047][ T6441] kAFS: No cell specified [ 72.900419][ T6446] netlink: 25 bytes leftover after parsing attributes in process `syz.1.162'. [ 72.905785][ T6446] gretap0: entered promiscuous mode [ 73.159464][ T6450] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 73.525332][ T6450] kAFS: No cell specified [ 74.409731][ T5749] Bluetooth: hci0: command 0x2016 tx timeout [ 74.554475][ T6468] syzkaller0: entered promiscuous mode [ 74.554494][ T6468] syzkaller0: entered allmulticast mode [ 74.932412][ T6479] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 75.683700][ T6479] kAFS: No cell specified [ 76.000509][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.163888][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.176416][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.176969][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.177138][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.177620][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.252514][ T25] usb 7-1: config 0 descriptor?? [ 76.315235][ T5854] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.481780][ T5854] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 76.489339][ T5854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.489469][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.584266][ T6493] syz_tun: entered allmulticast mode [ 76.655008][ T5854] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 76.664301][ T5854] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 76.664510][ T5854] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 76.684265][ T6492] syz_tun: left allmulticast mode [ 76.700447][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 76.701014][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 76.722794][ T25] usb 7-1: USB disconnect, device number 4 [ 76.858079][ T5854] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 76.858519][ T5854] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 76.934694][ T5854] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 76.963701][ T5854] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 76.963960][ T5854] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 77.005877][ T5854] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 77.431968][ T6519] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.593116][ T6519] kAFS: No cell specified [ 78.614865][ T6535] syzkaller0: entered promiscuous mode [ 78.614879][ T6535] syzkaller0: entered allmulticast mode [ 78.638388][ T6536] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 78.786470][ T6536] kAFS: No cell specified [ 79.102390][ T5846] usb 6-1: USB disconnect, device number 4 [ 79.118811][ T5846] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 79.144837][ T5846] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 79.145430][ T5846] keyspan 6-1:1.0: device disconnected [ 80.317723][ T6557] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.705612][ T6591] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.828019][ T6591] kAFS: No cell specified [ 83.600034][ T6604] netlink: 25 bytes leftover after parsing attributes in process `syz.1.204'. [ 83.600547][ T6604] 1猉功D龌: entered promiscuous mode [ 83.600564][ T6604] 1猉功D龌: left allmulticast mode [ 83.602798][ T6604] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.204'. [ 83.602870][ T6604] 0猉功D龌: renamed from 01猉功D龌 [ 83.606388][ T6604] 0猉功D龌: remember to turn off Van-Jacobson compression on your slave devices [ 83.606417][ T6604] 0猉功D龌: left promiscuous mode [ 83.606431][ T6604] 0猉功D龌: entered allmulticast mode [ 85.228024][ T6631] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.329933][ T6631] kAFS: No cell specified [ 85.478209][ T5749] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 85.478233][ T5749] CPU: 1 UID: 0 PID: 5749 Comm: kworker/u34:4 Not tainted syzkaller #0 PREEMPT(full) [ 85.478260][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.478279][ T5749] Workqueue: hci3 hci_rx_work [ 85.478313][ T5749] Call Trace: [ 85.478320][ T5749] [ 85.478330][ T5749] dump_stack_lvl+0x100/0x190 [ 85.478361][ T5749] sysfs_warn_dup.cold+0x1c/0x28 [ 85.478392][ T5749] sysfs_create_dir_ns+0x24b/0x2b0 [ 85.478420][ T5749] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 85.478447][ T5749] ? find_held_lock+0x2b/0x80 [ 85.478471][ T5749] ? kobject_add_internal+0x25f/0x930 [ 85.478501][ T5749] ? kobject_add_internal+0x25f/0x930 [ 85.478534][ T5749] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.478557][ T5749] kobject_add_internal+0x2c8/0x930 [ 85.478592][ T5749] kobject_add+0x16a/0x1e0 [ 85.478647][ T5749] ? __pfx_kobject_add+0x10/0x10 [ 85.478677][ T5749] ? class_to_subsys+0x10f/0x150 [ 85.478708][ T5749] ? kobject_put+0xb9/0x640 [ 85.478736][ T5749] ? _raw_spin_unlock+0x28/0x50 [ 85.478766][ T5749] device_add+0x294/0x1970 [ 85.478788][ T5749] ? __pfx_dev_set_name+0x10/0x10 [ 85.478815][ T5749] ? __pfx_device_add+0x10/0x10 [ 85.478838][ T5749] ? mgmt_send_event_skb+0x2fb/0x460 [ 85.478866][ T5749] hci_conn_add_sysfs+0x1a3/0x260 [ 85.478891][ T5749] le_conn_complete_evt+0x122f/0x2130 [ 85.478930][ T5749] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 85.478962][ T5749] ? hci_event_packet+0x186/0xcd0 [ 85.478999][ T5749] hci_le_conn_complete_evt+0x23c/0x3a0 [ 85.479031][ T5749] ? skb_pull_data+0x15f/0x1e0 [ 85.479059][ T5749] hci_le_meta_evt+0x34a/0x5f0 [ 85.479080][ T5749] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 85.479112][ T5749] hci_event_packet+0x51c/0xcd0 [ 85.479143][ T5749] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 85.479165][ T5749] ? __pfx_hci_event_packet+0x10/0x10 [ 85.479201][ T5749] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.479232][ T5749] hci_rx_work+0x451/0xfc0 [ 85.479268][ T5749] process_one_work+0xac7/0x1b10 [ 85.479312][ T5749] ? __pfx_process_one_work+0x10/0x10 [ 85.479340][ T5749] ? lock_acquire+0x1d1/0x380 [ 85.479380][ T5749] ? __pfx_hci_rx_work+0x10/0x10 [ 85.479414][ T5749] worker_thread+0x5ef/0xe50 [ 85.479452][ T5749] ? kthread+0x13a/0x450 [ 85.479475][ T5749] ? __pfx_worker_thread+0x10/0x10 [ 85.479513][ T5749] kthread+0x373/0x450 [ 85.479536][ T5749] ? __pfx_kthread+0x10/0x10 [ 85.479560][ T5749] ret_from_fork+0x730/0xd60 [ 85.479583][ T5749] ? __pfx_ret_from_fork+0x10/0x10 [ 85.479602][ T5749] ? native_load_gs_index+0x1e/0xc0 [ 85.479627][ T5749] ? __switch_to+0x800/0x10f0 [ 85.479652][ T5749] ? __pfx_kthread+0x10/0x10 [ 85.479677][ T5749] ret_from_fork_asm+0x1a/0x30 [ 85.479709][ T5749] [ 85.479826][ T5749] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 85.479856][ T5749] Bluetooth: hci3: failed to register connection device [ 86.112794][ T6642] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.216'. [ 86.112863][ T6642] 1猉功D龌: renamed from 00猉功D龌 (while UP) [ 86.262028][ T6655] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 86.414494][ T6655] kAFS: No cell specified [ 86.424036][ T6664] syz.2.223 uses obsolete (PF_INET,SOCK_PACKET) [ 86.443712][ T6665] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 86.584080][ T6665] kAFS: No cell specified [ 87.529634][ T5752] Bluetooth: hci3: command 0x2016 tx timeout [ 88.498694][ T6702] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 88.520458][ T6702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.534348][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 88.553120][ T6706] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 88.605646][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 88.749439][ T6706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.784195][ T6713] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 88.837073][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 89.513218][ T6741] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 89.534805][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.553006][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 89.609600][ T5752] Bluetooth: hci3: command 0x2016 tx timeout [ 89.656182][ T6745] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 89.677569][ T6745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.697241][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 89.751687][ T6751] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 89.755303][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 89.817946][ T6753] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 89.818830][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 90.165561][ T6771] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 90.166757][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 90.906023][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 91.306742][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 91.408797][ T6787] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 91.421739][ T6787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.435901][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 91.483761][ T6790] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 91.497412][ T6790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.514782][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 92.622215][ T6804] syzkaller0: entered promiscuous mode [ 92.622237][ T6804] syzkaller0: entered allmulticast mode [ 93.563878][ T6816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.640204][ T6854] validate_nla: 1 callbacks suppressed [ 95.640225][ T6854] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 95.644742][ T6854] __nla_validate_parse: 1 callbacks suppressed [ 95.644762][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 95.808315][ T6865] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.880594][ T6870] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 95.896445][ T6870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.911069][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 95.912847][ T6865] kAFS: No cell specified [ 96.373688][ T6882] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.485254][ T6882] kAFS: No cell specified [ 96.898799][ T6886] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 96.903636][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 98.192616][ T6914] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 98.373857][ T6914] kAFS: No cell specified [ 98.491040][ T6925] syzkaller0: entered promiscuous mode [ 98.491064][ T6925] syzkaller0: entered allmulticast mode [ 99.812562][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 100.515416][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 100.648759][ T6962] syzkaller0: entered promiscuous mode [ 100.648781][ T6962] syzkaller0: entered allmulticast mode [ 100.750438][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 102.661914][ T7004] syzkaller0: entered promiscuous mode [ 102.661936][ T7004] syzkaller0: entered allmulticast mode [ 102.773908][ T7010] Bluetooth: MGMT ver 1.23 [ 102.826749][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 102.937340][ T7023] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.945783][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 102.946898][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 103.054845][ T7023] kAFS: No cell specified [ 103.156524][ T7037] syzkaller0: entered promiscuous mode [ 103.156616][ T7037] syzkaller0: entered allmulticast mode [ 103.317065][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'. [ 103.351910][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 103.603494][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 103.655063][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 103.830644][ T7057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.851800][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 103.882979][ T7057] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 103.894209][ T7060] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.009374][ T7066] syzkaller0: entered promiscuous mode [ 104.009390][ T7066] syzkaller0: entered allmulticast mode [ 104.028982][ T7068] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.204023][ T7078] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.875583][ T7092] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.906014][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 105.078059][ T7101] syzkaller0: entered promiscuous mode [ 105.078075][ T7101] syzkaller0: entered allmulticast mode [ 107.244061][ T7131] syzkaller0: entered promiscuous mode [ 107.244109][ T7131] syzkaller0: entered allmulticast mode [ 107.433035][ T7138] __nla_validate_parse: 1 callbacks suppressed [ 107.433064][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 107.434449][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 107.580586][ T7142] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.648329][ T7145] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.685511][ T7142] kAFS: No cell specified [ 107.745587][ T7145] kAFS: No cell specified [ 108.389307][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 108.410960][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 108.415032][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 108.971062][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 108.972374][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 109.575930][ T7182] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 109.587299][ T7182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.600403][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 109.620813][ T7182] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 109.694445][ T7191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 109.695902][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 109.839668][ T5854] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 109.992954][ T5854] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 109.993776][ T5854] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.993802][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.002084][ T5854] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 110.002251][ T5854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 110.002301][ T5854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 110.010518][ T5854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 110.010584][ T5854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 110.013802][ T5854] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 110.019342][ T5854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 110.019407][ T5854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 110.021367][ T5854] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 110.889646][ T5847] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.050391][ T5847] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 111.052684][ T5847] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.052736][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.066592][ T5847] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 111.066775][ T5847] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 111.066830][ T5847] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 111.071072][ T5847] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 111.071148][ T5847] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 111.075344][ T5847] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 111.076773][ T5847] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 111.076839][ T5847] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 111.080805][ T5847] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 111.273153][ T7226] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 111.286787][ T7226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.573672][ T7226] bond1: (slave bridge2): making interface the new active one [ 111.583853][ T7226] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 112.209820][ T5825] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 112.367047][ T5825] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 112.377282][ T5825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.377373][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.496908][ T5825] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 112.521558][ T5825] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 112.522070][ T5825] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 112.579097][ T5825] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 112.579973][ T5825] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 113.248898][ T5825] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB4 [ 113.252919][ T5825] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 113.252956][ T5825] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 113.255051][ T854] usb 7-1: USB disconnect, device number 5 [ 113.256018][ T5825] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB5 [ 113.284951][ T854] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 113.304439][ T854] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 113.304949][ T854] keyspan 7-1:1.0: device disconnected [ 113.393335][ T7248] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 113.411755][ T7248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.428643][ T7248] __nla_validate_parse: 6 callbacks suppressed [ 113.428657][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 113.433906][ T7251] syzkaller0: entered promiscuous mode [ 113.433929][ T7251] syzkaller0: entered allmulticast mode [ 113.445958][ T7248] bond4: (slave bridge4): making interface the new active one [ 113.447082][ T7248] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 113.722642][ T854] usb 5-1: USB disconnect, device number 4 [ 113.728059][ T854] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 113.737914][ T854] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 113.740682][ T854] keyspan 5-1:1.0: device disconnected [ 114.482348][ T7268] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 114.508216][ T7268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.542357][ T7268] bond4: (slave bridge2): making interface the new active one [ 114.543525][ T7268] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 114.634263][ T7275] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 114.692546][ T7275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 114.804966][ T7275] bond5: (slave bridge3): making interface the new active one [ 114.806205][ T7275] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 115.015080][ T7284] syzkaller0: entered promiscuous mode [ 115.015097][ T7284] syzkaller0: entered allmulticast mode [ 115.027500][ T854] usb 6-1: USB disconnect, device number 5 [ 115.033193][ T854] keyspan_2 ttyUSB4: Keyspan 2 port adapter converter now disconnected from ttyUSB4 [ 115.040409][ T7286] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 115.041955][ T854] keyspan_2 ttyUSB5: Keyspan 2 port adapter converter now disconnected from ttyUSB5 [ 115.043657][ T854] keyspan 6-1:1.0: device disconnected [ 115.108431][ T7290] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 115.114882][ T7286] 8021q: adding VLAN 0 to HW filter on device bond6 [ 115.133865][ T7288] bond6: (slave bridge4): making interface the new active one [ 115.134555][ T7288] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 115.158597][ T7293] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 115.182642][ T7290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.216312][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 115.217348][ T7293] 8021q: adding VLAN 0 to HW filter on device bond5 [ 115.245575][ T7294] bond2: (slave bridge3): making interface the new active one [ 115.246184][ T7294] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 115.271167][ T7293] bond5: (slave bridge2): making interface the new active one [ 115.272302][ T7293] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 115.496634][ T7308] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 115.519971][ T7308] 8021q: adding VLAN 0 to HW filter on device bond6 [ 115.551160][ T7308] bond6: (slave bridge3): making interface the new active one [ 115.552328][ T7308] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 115.624111][ T7311] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 115.641956][ T7311] 8021q: adding VLAN 0 to HW filter on device bond7 [ 115.674269][ T7311] bond7: (slave bridge4): making interface the new active one [ 115.675808][ T7311] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 116.338741][ T7319] syzkaller0: entered promiscuous mode [ 116.338764][ T7319] syzkaller0: entered allmulticast mode [ 116.562640][ T7321] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 116.587858][ T7321] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.603760][ T7321] netlink: 68 bytes leftover after parsing attributes in process `syz.1.433'. [ 116.614061][ T7321] bond3: (slave bridge4): making interface the new active one [ 116.615312][ T7321] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 116.683175][ T7327] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 116.701373][ T7327] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.721116][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 116.721140][ T7327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.435'. [ 116.742841][ T7327] bond4: (slave bridge5): making interface the new active one [ 116.759231][ T7327] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 117.008589][ T7333] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 117.031100][ T7333] 8021q: adding VLAN 0 to HW filter on device bond5 [ 117.060130][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 117.074522][ T7333] bond5: (slave bridge6): making interface the new active one [ 117.075393][ T7333] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 117.194050][ T7338] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 117.206654][ T7338] 8021q: adding VLAN 0 to HW filter on device bond7 [ 117.222179][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 117.230417][ T7338] bond7: (slave bridge5): making interface the new active one [ 117.239874][ T7338] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 117.709702][ T5854] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.081102][ T7351] 8021q: adding VLAN 0 to HW filter on device bond8 [ 118.110222][ T7351] netlink: 68 bytes leftover after parsing attributes in process `syz.2.443'. [ 118.127089][ T7351] bond8: (slave bridge6): making interface the new active one [ 118.129427][ T7351] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 118.157572][ T7354] syzkaller0: entered promiscuous mode [ 118.157594][ T7354] syzkaller0: entered allmulticast mode [ 118.354196][ T7358] 8021q: adding VLAN 0 to HW filter on device bond9 [ 118.376885][ T7358] bond9: (slave bridge7): making interface the new active one [ 118.377747][ T7358] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 119.533145][ T7372] 8021q: adding VLAN 0 to HW filter on device bond10 [ 119.557965][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 119.577606][ T7372] bond10: (slave bridge8): making interface the new active one [ 119.578884][ T7372] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 120.739700][ T7388] syzkaller0: entered promiscuous mode [ 120.739726][ T7388] syzkaller0: entered allmulticast mode [ 121.177325][ T7396] validate_nla: 3 callbacks suppressed [ 121.177338][ T7396] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 121.298673][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 121.298708][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 121.375107][ T7396] 8021q: adding VLAN 0 to HW filter on device bond6 [ 121.897675][ T7402] netlink: 'syz.0.458': attribute type 1 has an invalid length. [ 121.950866][ T7403] netlink: 68 bytes leftover after parsing attributes in process `syz.0.458'. [ 122.606542][ T7396] bond6: (slave bridge7): making interface the new active one [ 122.611159][ T7396] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 122.653808][ T7402] 8021q: adding VLAN 0 to HW filter on device bond8 [ 122.701068][ T7404] bond8: (slave bridge5): making interface the new active one [ 122.705824][ T7404] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 123.010634][ T7391] ------------[ cut here ]------------ [ 123.010647][ T7391] failed to allocate ring buffer on CPU 1 [ 123.010655][ T7391] WARNING: kernel/trace/ring_buffer.c:8109 at trace_rb_cpu_prepare+0x463/0x520, CPU#3: syz.3.455/7391 [ 123.019888][ T7391] Modules linked in: [ 123.021506][ T7391] CPU: 3 UID: 0 PID: 7391 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(full) [ 123.024691][ T7391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.028153][ T7391] RIP: 0010:trace_rb_cpu_prepare+0x465/0x520 [ 123.032012][ T7391] Code: 48 c1 ea 03 80 3c 02 00 0f 84 bc fc ff ff 48 8b 3c 24 e8 8e fd 6d 00 e9 ae fc ff ff e8 54 7f fb ff 48 8d 3d cd 3a 39 0f 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 d3 fd ff ff 4c 89 ef e8 64 fd 6d [ 123.039415][ T7391] RSP: 0000:ffffc90003ee78b8 EFLAGS: 00010283 [ 123.041525][ T7391] RAX: 0000000000030bb9 RBX: ffff88805fafc8b8 RCX: ffffc90007862000 [ 123.044144][ T7391] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff91496170 [ 123.046661][ T7391] RBP: 0000000000000001 R08: ffff88806c483688 R09: 0000000000000000 [ 123.049426][ T7391] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 123.052696][ T7391] R13: ffff88805fafc810 R14: 0000000000000162 R15: 0000000000000000 [ 123.056323][ T7391] FS: 0000000000000000(0000) GS:ffff888096c52000(0063) knlGS:00000000f547db40 [ 123.060457][ T7391] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 123.062942][ T7391] CR2: 000000008000b000 CR3: 000000004c936000 CR4: 0000000000352ef0 [ 123.065639][ T7391] Call Trace: [ 123.066746][ T7391] [ 123.067689][ T7391] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 123.069920][ T7391] cpuhp_invoke_callback+0x205/0x9a0 [ 123.071941][ T7391] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 123.073761][ T7391] cpuhp_issue_call+0x1b8/0x970 [ 123.075381][ T7391] __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400 [ 123.077864][ T7391] __cpuhp_state_add_instance+0xda/0x2e0 [ 123.080118][ T7391] alloc_buffer+0x6f8/0x1690 [ 123.081943][ T7391] __ring_buffer_alloc+0x2d/0x40 [ 123.083809][ T7391] allocate_trace_buffer+0x150/0xa30 [ 123.086113][ T7391] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 123.088268][ T7391] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 123.090289][ T7391] ? lockdep_init_map_type+0x5c/0x250 [ 123.092017][ T7391] trace_array_create_systems+0x582/0xc30 [ 123.093824][ T7391] instance_mkdir+0xca/0x140 [ 123.095356][ T7391] tracefs_syscall_mkdir+0x10e/0x180 [ 123.097052][ T7391] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 123.099067][ T7391] vfs_mkdir+0x364/0x850 [ 123.100748][ T7391] filename_mkdirat+0x48b/0x5e0 [ 123.102510][ T7391] ? __pfx_filename_mkdirat+0x10/0x10 [ 123.104494][ T7391] ? strncpy_from_user+0x19d/0x2d0 [ 123.106468][ T7391] ? do_getname+0x191/0x390 [ 123.107930][ T7391] __ia32_sys_mkdirat+0x88/0xc0 [ 123.109552][ T7391] __do_fast_syscall_32+0x13a/0x8b0 [ 123.111255][ T7391] do_fast_syscall_32+0x32/0x70 [ 123.112860][ T7391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.114911][ T7391] RIP: 0023:0xf708efec [ 123.116235][ T7391] Code: Unable to access opcode bytes at 0xf708efc2. [ 123.118425][ T7391] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 123.121468][ T7391] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 123.124229][ T7391] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 123.127490][ T7391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.130928][ T7391] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.133485][ T7391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.135986][ T7391] [ 123.136967][ T7391] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.139331][ T7391] CPU: 3 UID: 0 PID: 7391 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(full) [ 123.143183][ T7391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.147066][ T7391] Call Trace: [ 123.148257][ T7391] [ 123.149574][ T7391] dump_stack_lvl+0x100/0x190 [ 123.152094][ T7391] vpanic+0x553/0x970 [ 123.153490][ T7391] ? __pfx_vpanic+0x10/0x10 [ 123.154975][ T7391] panic+0xd1/0xe0 [ 123.156154][ T7391] ? __pfx_panic+0x10/0x10 [ 123.157586][ T7391] check_panic_on_warn.cold+0x19/0x34 [ 123.159677][ T7391] ? trace_rb_cpu_prepare+0x463/0x520 [ 123.161410][ T7391] __warn.cold+0x191/0x318 [ 123.162845][ T7391] __report_bug+0x30f/0x440 [ 123.164276][ T7391] ? trace_rb_cpu_prepare+0x463/0x520 [ 123.166599][ T7391] ? __pfx___report_bug+0x10/0x10 [ 123.168419][ T7391] ? rb_allocate_cpu_buffer+0xeb0/0x2780 [ 123.170699][ T7391] ? rb_allocate_cpu_buffer+0xeec/0x2780 [ 123.173068][ T7391] ? lockdep_hardirqs_on+0x7d/0x110 [ 123.175402][ T7391] ? __pfx_rb_cpu_sync+0x10/0x10 [ 123.177212][ T7391] report_bug_entry+0xe2/0x290 [ 123.178851][ T7391] ? trace_rb_cpu_prepare+0x465/0x520 [ 123.181224][ T7391] handle_bug+0x1cd/0x2a0 [ 123.182788][ T7391] exc_invalid_op+0x17/0x50 [ 123.184543][ T7391] asm_exc_invalid_op+0x1a/0x20 [ 123.186317][ T7391] RIP: 0010:trace_rb_cpu_prepare+0x465/0x520 [ 123.188207][ T7391] Code: 48 c1 ea 03 80 3c 02 00 0f 84 bc fc ff ff 48 8b 3c 24 e8 8e fd 6d 00 e9 ae fc ff ff e8 54 7f fb ff 48 8d 3d cd 3a 39 0f 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 d3 fd ff ff 4c 89 ef e8 64 fd 6d [ 123.194172][ T7391] RSP: 0000:ffffc90003ee78b8 EFLAGS: 00010283 [ 123.196112][ T7391] RAX: 0000000000030bb9 RBX: ffff88805fafc8b8 RCX: ffffc90007862000 [ 123.198715][ T7391] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff91496170 [ 123.201518][ T7391] RBP: 0000000000000001 R08: ffff88806c483688 R09: 0000000000000000 [ 123.204676][ T7391] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 123.208336][ T7391] R13: ffff88805fafc810 R14: 0000000000000162 R15: 0000000000000000 [ 123.211304][ T7391] ? trace_rb_cpu_prepare+0x45c/0x520 [ 123.213005][ T7391] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 123.214839][ T7391] cpuhp_invoke_callback+0x205/0x9a0 [ 123.216535][ T7391] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 123.218342][ T7391] cpuhp_issue_call+0x1b8/0x970 [ 123.219922][ T7391] __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400 [ 123.222579][ T7391] __cpuhp_state_add_instance+0xda/0x2e0 [ 123.224788][ T7391] alloc_buffer+0x6f8/0x1690 [ 123.226350][ T7391] __ring_buffer_alloc+0x2d/0x40 [ 123.227981][ T7391] allocate_trace_buffer+0x150/0xa30 [ 123.229718][ T7391] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 123.232000][ T7391] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 123.233840][ T7391] ? lockdep_init_map_type+0x5c/0x250 [ 123.235538][ T7391] trace_array_create_systems+0x582/0xc30 [ 123.237333][ T7391] instance_mkdir+0xca/0x140 [ 123.238828][ T7391] tracefs_syscall_mkdir+0x10e/0x180 [ 123.240548][ T7391] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 123.242420][ T7391] vfs_mkdir+0x364/0x850 [ 123.243893][ T7391] filename_mkdirat+0x48b/0x5e0 [ 123.245689][ T7391] ? __pfx_filename_mkdirat+0x10/0x10 [ 123.247620][ T7391] ? strncpy_from_user+0x19d/0x2d0 [ 123.249461][ T7391] ? do_getname+0x191/0x390 [ 123.250946][ T7391] __ia32_sys_mkdirat+0x88/0xc0 [ 123.252486][ T7391] __do_fast_syscall_32+0x13a/0x8b0 [ 123.254133][ T7391] do_fast_syscall_32+0x32/0x70 [ 123.255709][ T7391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.257690][ T7391] RIP: 0023:0xf708efec [ 123.259036][ T7391] Code: Unable to access opcode bytes at 0xf708efc2. [ 123.261127][ T7391] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 123.263755][ T7391] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 123.266257][ T7391] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 123.268831][ T7391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.271680][ T7391] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.274499][ T7391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.277001][ T7391] [ 123.278810][ T7391] Kernel Offset: disabled [ 123.280198][ T7391] Rebooting in 86400 seconds..