last executing test programs: 31m55.213693502s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000500000000000900020073797a320000000005000400000000000500010007002d1d0d0003006c6973743a736574"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) 31m54.566114871s ago: executing program 3 (id=10): r0 = memfd_create(&(0x7f0000000180)='[\v\xdb\xd1md\xc8\x13\x8aH\\;T\x01R\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x00%||\xa0\x8ez\xadT\xc8\xdc\xd7\xca\xb59RAD\f\t\x00\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01J;\xd5\x97\x9ffb\x06L\xae\xb2\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xbb\xfc\xc9\x95\xde\xad\x8f\x0e=\xd7r\xf1v\x8bz\x83h\xeeY\xba\xa1Z\x9dW\xec\"\xd7t^H~\x9b\xc7\x1a\x8e\x93P\x0e\x92\x02\x13\a\xd4\x10\xdb\xcf\x83*\xaf\x95\x8f\xb8\x92v\xf0KMt\xb1\xaa\n\x14F\xbfyA*\xcdRh5eZ\xce\x1f\x9e\xccG\x1b\t\xb2\xa3\x96\xe5tU2E.s_\xf2\xd1j\'\xff\x01\xd1\xb4\x85eg\xf3`\xf08\x9f\xc2\xc9\xd8\xf6\x15\xf12\xeal+-\xd74]\x15\x92B\x14 \x81\xb4+\xcf\xae_\x89\x1f\xe2lc\x7f,\x0fa\x0e\xf6\x1fC[\x9c\x17\xa3\xd6\xa7\xcd\x15\xcb\xf7\x16R\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 31m54.062364267s ago: executing program 3 (id=12): syz_io_uring_setup(0x5229, &(0x7f0000000080)={0x0, 0x6bb8, 0x8, 0x3, 0x42f6}, &(0x7f0000000100), &(0x7f0000000140), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) 31m53.770005209s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 31m53.574396191s ago: executing program 3 (id=16): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) 31m50.953198575s ago: executing program 3 (id=26): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) sendmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2], 0x30}, 0x0) 31m50.219261477s ago: executing program 32 (id=26): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) sendmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2], 0x30}, 0x0) 28m13.409043684s ago: executing program 5 (id=1469): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r1, {0x7, 0x2d, 0x9, 0x7fffffff80004080, 0x0, 0xfff, 0xc, 0x5, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x1, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 28m12.891466423s ago: executing program 5 (id=1471): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x4d) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x4}, 0x1c) listen(r1, 0x4c) 28m11.020615714s ago: executing program 5 (id=1477): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 28m10.627341042s ago: executing program 5 (id=1478): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 28m9.45338663s ago: executing program 5 (id=1482): openat$dsp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x11d5, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc2}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) 28m8.394147466s ago: executing program 5 (id=1488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 28m7.957797292s ago: executing program 33 (id=1488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 25m30.892906403s ago: executing program 1 (id=1858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, 0x0) 25m27.673899894s ago: executing program 1 (id=1862): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) fsmount(r2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x5) read$FUSE(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x20000) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) 25m21.57461903s ago: executing program 1 (id=1871): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 25m19.546929647s ago: executing program 1 (id=1875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x24060400) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$tun(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="635a0b420074060000e2ff00000000000000000000000000ff0100000000000000000000000000018706040302100200ff020000000000000000000000000001fc00000000000000000000000000000000000000000000000000000000000000330000000000000009000000000000000000000000000000000000000000000a00004e2200004e2400000000000000040000000100000004000000"], 0x9c) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x0, r1) 25m17.018452484s ago: executing program 1 (id=1880): r0 = syz_pidfd_open(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1800, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) r4 = pidfd_getfd(r0, r0, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000200)) listen(0xffffffffffffffff, 0x7e5a) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x800) umount2(&(0x7f0000000040)='.\x00', 0x2) 25m7.528179424s ago: executing program 1 (id=1893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r4 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) 24m51.379922543s ago: executing program 34 (id=1893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r4 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) 16m11.127665361s ago: executing program 2 (id=5552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) chown(0x0, 0x0, 0xee01) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f00000001c0)='R\x10rusp\xe3V\n\xfb\xd5>|\x15U\xf5X\x7fZ\xaf\xe8\xda6\xd2\x8e\x00 \xad\xef!8\xc9\x12\f\xdfV\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) 16m9.52514112s ago: executing program 2 (id=5556): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r4 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000540)={'wg0\x00', {0x2, 0x0, @private=0x8001}}) 16m7.202353751s ago: executing program 2 (id=5558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x4e20, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x5b, 0x100) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000040)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) 15m55.320704774s ago: executing program 2 (id=5573): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}, {0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x6, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15m49.670135381s ago: executing program 2 (id=5585): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 15m47.561069082s ago: executing program 2 (id=5586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x181000, 0x10) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 15m30.874260044s ago: executing program 35 (id=5586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x181000, 0x10) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 9m59.130311228s ago: executing program 0 (id=8129): socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xa0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 9m50.424114193s ago: executing program 0 (id=8138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xbcff, 0x0, 0x0) accept(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14048010) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 9m48.302942173s ago: executing program 0 (id=8147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) getresgid(0x0, &(0x7f0000004180), &(0x7f00000041c0)) getuid() 9m46.638127613s ago: executing program 0 (id=8150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000100)=0x2c0000) 9m41.828977776s ago: executing program 0 (id=8154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x40000}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) mq_open(0x0, 0x8c2, 0x30, 0x0) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 9m40.138803808s ago: executing program 0 (id=8155): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) r4 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) prctl$PR_SET_SECCOMP(0xe, 0x0, 0x0) 9m33.575814523s ago: executing program 6 (id=8161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 9m29.29748535s ago: executing program 8 (id=8168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639", 0xca}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m29.271151662s ago: executing program 6 (id=8169): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x29, r6, {0x7}}, './file1\x00'}) 9m25.569868562s ago: executing program 8 (id=8172): socket$inet_tcp(0x2, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) close(0xffffffffffffffff) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000810, &(0x7f0000000000)={[{@stats}]}) 9m22.095660268s ago: executing program 36 (id=8155): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) r4 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) prctl$PR_SET_SECCOMP(0xe, 0x0, 0x0) 9m21.860467093s ago: executing program 8 (id=8175): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x80000000005cbc3) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x18) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000080)={0x10000000}) 9m21.859183829s ago: executing program 6 (id=8176): read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket(0x22, 0x2, 0x3) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m17.442082704s ago: executing program 8 (id=8181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) sendto$inet6(r1, &(0x7f0000000080)='8', 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) r4 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000000)=0x8000, 0x4) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 9m16.769050065s ago: executing program 6 (id=8182): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000003c0)="c61c010ba000", 0x6}], 0x1, 0xa) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x401, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0xbb, 0x8, 0x0, 0x5, 0xfffffffffffffff8], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m16.332791445s ago: executing program 6 (id=8183): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x80001, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x41145}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x8000) 9m13.864444995s ago: executing program 8 (id=8186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) 9m11.558068186s ago: executing program 8 (id=8187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 9m8.680165916s ago: executing program 6 (id=8191): read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) 8m50.738687807s ago: executing program 37 (id=8187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 8m50.478586196s ago: executing program 38 (id=8191): read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) 4m31.17322555s ago: executing program 7 (id=8769): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 4m30.587910312s ago: executing program 7 (id=8770): clock_adjtime(0x0, &(0x7f0000000700)={0x1000000000066fb, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240b}) clock_adjtime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x3c}}, 0x0) 4m23.851481859s ago: executing program 7 (id=8774): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 4m22.387254272s ago: executing program 7 (id=8777): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 4m20.659019198s ago: executing program 7 (id=8779): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) r3 = fanotify_init(0x1a, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r3, 0x441, 0x4800001a, r4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m18.848794369s ago: executing program 7 (id=8781): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r1, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 4m2.290126267s ago: executing program 39 (id=8781): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r1, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1m48.86610091s ago: executing program 4 (id=8851): socket$kcm(0x10, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x8000000000000000) readlinkat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/16, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m47.19625952s ago: executing program 4 (id=8853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x20000200, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1f, 0x9, @mcast2, 0x9}, 0x1c) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r3, 0x0, 0x300, 0x0, 0x0, 0x2}]) 1m40.371520408s ago: executing program 4 (id=8855): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0xf, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x80, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x200809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1004, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x11afa, 0xc00, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000802, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="370a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="2012280000009815"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) r8 = syz_clone3(&(0x7f0000000000)={0x281200400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = getpgid(r8) kcmp(r8, r9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(r7, 0xae80, 0x0) r10 = syz_open_dev$sg(0x0, 0x0, 0x8002) r11 = fcntl$dupfd(r10, 0x0, r10) write$tun(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="635a0b420064060000000000000000000000000000000000ff01000000000000cbe6676bfa0eea00000000000000013302000000000000050200086b00010007080000000200438c660000000000000002040100507302ff0100000000000000000000000000010000000000000000000000000000000a00"], 0x8c) r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 1m39.722837598s ago: executing program 4 (id=8856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0xe) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) 1m38.802722623s ago: executing program 4 (id=8857): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$kcm(0x11, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x803, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r4, &(0x7f00000005c0)=""/4108, 0x100c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) ptrace$pokeuser(0x6, r0, 0x388, 0x41d9fda7) r5 = syz_open_procfs(0x0, &(0x7f0000002380)='net/snmp\x00') pread64(r5, 0x0, 0x0, 0x1) 1m30.102883019s ago: executing program 4 (id=8859): socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xff5d, &(0x7f0000000240)=0x7834bcc6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x104600, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="1f00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3", 0x1f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x54) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd810342b4e885b34350bba89e645b034b5594bfc109bc8b54628dab0da83bcb6b6b81aa6a448fc78e518de0673bbb6cb2dd6dd6a15eee3ad0cf9361cdaff4cd7bca911c8c74bad1bab0decf46577bfe16b8c52a658ffaf7663f880aaec5f5202775b3c4a6aa60ca804bbd6f8928"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x4, 0x7}) 1m13.562968818s ago: executing program 40 (id=8859): socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xff5d, &(0x7f0000000240)=0x7834bcc6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x104600, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="1f00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3", 0x1f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x54) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd810342b4e885b34350bba89e645b034b5594bfc109bc8b54628dab0da83bcb6b6b81aa6a448fc78e518de0673bbb6cb2dd6dd6a15eee3ad0cf9361cdaff4cd7bca911c8c74bad1bab0decf46577bfe16b8c52a658ffaf7663f880aaec5f5202775b3c4a6aa60ca804bbd6f8928"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x4, 0x7}) 43.569703836s ago: executing program 9 (id=8875): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) openat$kvm(0xffffffffffffff9c, 0x0, 0x8c3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1cabe2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x200) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x806}]}, 0x18}, 0x1, 0x0, 0x0, 0x24048010}, 0xc000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x3, {0x4, 0x21}, 0x14, 0x7}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}) recvmmsg(r0, &(0x7f00000048c0), 0x1003, 0x12022, 0x0) 35.213599053s ago: executing program 9 (id=8876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000578000/0x4000)=nil, &(0x7f000046e000/0x2000)=nil, &(0x7f00005d8000/0x4000)=nil, &(0x7f000067c000/0x3000)=nil, &(0x7f00004ab000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f000028f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00007df000/0x2000)=nil, &(0x7f00005f1000/0x4000)=nil, 0x0}, 0x68) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x80) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) 33.370147833s ago: executing program 9 (id=8877): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) sched_getattr(r0, &(0x7f0000000180)={0x38}, 0x38, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) unlink(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="338687cfd8df", @broadcast, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x10, 0x0, 0x0, @empty, @mcast2, {[@hopopts={0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0xffff}]}]}}}}}, 0x0) 21.899601077s ago: executing program 9 (id=8878): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a010102000000000000000000000000060000000403"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sched_getaffinity(0x0, 0x8, &(0x7f0000000200)) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) splice(r0, &(0x7f0000000240)=0x7cd, r6, &(0x7f0000000280)=0x2, 0x0, 0x1) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000300)={0x90000009}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 19.783303259s ago: executing program 9 (id=8879): socketpair$unix(0x1, 0x2, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="a638acc9b7b7", @ANYRES64], 0xf5) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x10003, 0x0, 0xb000, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc644}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x28b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x0) writev(r5, &(0x7f0000000540), 0x2) 16.472715613s ago: executing program 9 (id=8880): syz_usb_connect$uac1(0x2, 0x91, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010102000000403512078240000104030109027f00030101005c090400000001"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x4048841) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r4, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x4500, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 0s ago: executing program 41 (id=8880): syz_usb_connect$uac1(0x2, 0x91, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010102000000403512078240000104030109027f00030101005c090400000001"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x4048841) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r4, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x4500, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) kernel console output (not intermixed with test programs): 1AFE.0015: unknown main item tag 0x0 [ 1330.756230][ T5932] hid-generic 0003:0B05:1AFE.0015: invalid report_count 43684 [ 1330.756260][ T5932] hid-generic 0003:0B05:1AFE.0015: item 0 2 1 9 parsing failed [ 1330.782203][ T5932] hid-generic 0003:0B05:1AFE.0015: probe with driver hid-generic failed with error -22 [ 1330.854840][ T5932] usb 9-1: USB disconnect, device number 14 [ 1336.949172][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1339.026814][T26465] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7790'. [ 1339.901155][T26477] input: syz1 as /devices/virtual/input/input30 [ 1340.121344][T26481] fuse: Bad value for 'fd' [ 1340.616643][T26486] fuse: fd is not a fuse device [ 1342.781028][T26521] netlink: 'syz.4.7814': attribute type 2 has an invalid length. [ 1343.319328][T26517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1343.837905][T26534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7820'. [ 1347.540555][T26600] netlink: 'syz.6.7851': attribute type 3 has an invalid length. [ 1354.154606][T26658] overlayfs: failed to resolve './cgroup': -2 [ 1357.251758][T26643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.400992][T26643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1357.606252][T26676]  speed is unknown, defaulting to 1000 [ 1361.929459][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.929545][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.213152][T26765] loop2: detected capacity change from 0 to 7 [ 1365.232998][T26765] Dev loop2: unable to read RDB block 7 [ 1365.233051][T26765] loop2: AHDI p1 p2 p3 [ 1365.233082][T26765] loop2: partition table partially beyond EOD, truncated [ 1365.233350][T26765] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1365.233373][T26765] loop2: p3 start 335544320 is beyond EOD, truncated [ 1366.805139][T26776] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1366.927254][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1368.682121][T26799] uprobe: syz.0.7924:26799 failed to unregister, leaking uprobe [ 1369.115860][T26809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7928'. [ 1369.426637][T26809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7928'. [ 1370.154504][T19549] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.236419][T19549] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.297749][T19562] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.298052][T19562] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1373.179220][ T5818] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1373.331645][ T5818] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1373.331680][ T5818] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1373.331708][ T5818] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1373.337708][ T5818] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1373.337739][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1373.337762][ T5818] usb 9-1: Product: syz [ 1373.337777][ T5818] usb 9-1: Manufacturer: syz [ 1373.337793][ T5818] usb 9-1: SerialNumber: syz [ 1373.823371][ T5818] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1374.008679][ T1242] usb 9-1: USB disconnect, device number 15 [ 1374.292022][ T1242] usblp0: removed [ 1377.180570][T26924] netlink: 'syz.8.7974': attribute type 11 has an invalid length. [ 1378.370264][T26940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7981'. [ 1379.135393][T26951] overlayfs: failed to clone upperpath [ 1382.257971][T26969] bridge_slave_1: left allmulticast mode [ 1382.258002][T26969] bridge_slave_1: left promiscuous mode [ 1382.258263][T26969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.914752][T26969] bond0: (slave bond_slave_0): Releasing backup interface [ 1383.066423][T26969] bond0: (slave bond_slave_1): Releasing backup interface [ 1384.337705][T26969] team0: Port device team_slave_0 removed [ 1384.521047][T26969] team0: Port device team_slave_1 removed [ 1384.537815][T26969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.652598][T26969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.616326][T26969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.616359][T26969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.662389][T26969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1385.833873][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8014'. [ 1385.833898][T27029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8014'. [ 1385.833929][T27029] netlink: 'syz.0.8014': attribute type 12 has an invalid length. [ 1386.173217][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8014'. [ 1386.173243][T27029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8014'. [ 1386.173271][T27029] netlink: 'syz.0.8014': attribute type 12 has an invalid length. [ 1387.158324][T27054] fuse: fd is not a fuse device [ 1387.842291][T27068] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8027'. [ 1388.081501][T27068] ip6gre1: entered promiscuous mode [ 1388.090544][T27068] ip6gre1: entered allmulticast mode [ 1388.522871][T27077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8029'. [ 1404.570051][T27185] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1411.568852][T27237] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8079'. [ 1411.607602][T27237] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8079'. [ 1413.364668][T27239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8080'. [ 1413.944697][T27255] binder_alloc: 27254: binder_alloc_buf, no vma [ 1422.137984][T27314] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8104'. [ 1423.378366][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.378441][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.826032][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8109'. [ 1426.555405][T27347] fuse: fd is not a fuse device [ 1426.821835][T27350] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8117'. [ 1428.479176][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1435.389117][T23228] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1435.671601][T23228] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1435.671637][T23228] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.671660][T23228] usb 9-1: Product: syz [ 1435.671677][T23228] usb 9-1: Manufacturer: syz [ 1435.671694][T23228] usb 9-1: SerialNumber: syz [ 1435.787589][T23228] usb 9-1: config 0 descriptor?? [ 1436.552672][T23228] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1439.503265][T23228] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1439.646875][T23228] usb 9-1: USB disconnect, device number 16 [ 1471.494084][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1471.494130][ T37] audit: type=1800 audit(1776552692.700:672): pid=27563 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.8178" name="file0" dev="overlay" ino=5158 res=0 errno=0 [ 1474.096690][T22706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1474.197749][T22706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1474.206559][T27574] vlan0: entered allmulticast mode [ 1474.206581][T27574] veth0_to_bond: entered allmulticast mode [ 1474.800766][T27579] ip6gretap0: entered promiscuous mode [ 1474.801107][T27579] macsec1: entered promiscuous mode [ 1474.801123][T27579] vlan2: entered promiscuous mode [ 1475.255359][T22706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1475.285740][T22706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1475.287133][T22706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1476.301520][T27579] vlan2: left promiscuous mode [ 1476.302187][T27579] ip6gretap0: left promiscuous mode [ 1478.003324][ T5821] Bluetooth: hci0: command tx timeout [ 1480.115572][ T5821] Bluetooth: hci0: command tx timeout [ 1480.151934][T22706] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1482.149242][T22706] Bluetooth: hci0: command tx timeout [ 1484.230734][T22706] Bluetooth: hci0: command tx timeout [ 1484.742081][T27534] syz_tun (unregistering): left allmulticast mode [ 1484.877715][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.877798][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.593033][T27575]  speed is unknown, defaulting to 1000 [ 1498.333087][T27575] chnl_net:caif_netlink_parms(): no params data found [ 1498.561001][T27575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.561244][T27575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.561450][T27575] bridge_slave_0: entered allmulticast mode [ 1498.564342][T27575] bridge_slave_0: entered promiscuous mode [ 1498.568271][T27575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.568506][T27575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.585794][T27575] bridge_slave_1: entered allmulticast mode [ 1498.645168][T27575] bridge_slave_1: entered promiscuous mode [ 1498.732842][T27575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.758539][T27575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.817208][T27575] team0: Port device team_slave_0 added [ 1498.833700][T27575] team0: Port device team_slave_1 added [ 1498.895682][T27575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.895702][T27575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.895733][T27575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.898184][T27575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.898201][T27575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.898236][T27575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.086455][T27575] hsr_slave_0: entered promiscuous mode [ 1499.087956][T27575] hsr_slave_1: entered promiscuous mode [ 1499.102532][T27575] debugfs: 'hsr0' already exists in 'hsr' [ 1499.102562][T27575] Cannot create hsr debugfs directory [ 1500.538156][T27659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1500.781266][T27659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1501.336043][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1501.402504][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1501.407348][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1501.713066][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1501.715090][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1502.289234][T27659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1502.294894][T27659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1502.295794][T27659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1504.016458][T27659] Bluetooth: hci6: command tx timeout [ 1504.566971][T27659] Bluetooth: hci2: command tx timeout [ 1506.069174][T27659] Bluetooth: hci6: command tx timeout [ 1506.847841][T27659] Bluetooth: hci2: command tx timeout [ 1508.148985][T27659] Bluetooth: hci6: command tx timeout [ 1509.264081][T27659] Bluetooth: hci2: command tx timeout [ 1510.475069][T22706] Bluetooth: hci6: command tx timeout [ 1510.540994][T19532] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.541033][T19532] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.630779][T22706] Bluetooth: hci2: command tx timeout [ 1512.126095][T27662]  speed is unknown, defaulting to 1000 [ 1512.211951][T27658]  speed is unknown, defaulting to 1000 [ 1513.878167][T27658] chnl_net:caif_netlink_parms(): no params data found [ 1513.897913][T27575] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1514.414265][T27575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1514.463675][T27575] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1516.229225][T22706] Bluetooth: hci5: command 0x0406 tx timeout [ 1516.232303][T27575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1516.289930][T27575] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1517.663591][T27575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1518.178214][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8217'. [ 1521.917253][T27750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8221'. [ 1521.992847][T27751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8221'. [ 1523.102080][T19532] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1523.102121][T19532] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.357101][T27575] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1523.729307][T27575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1524.819874][T27662] chnl_net:caif_netlink_parms(): no params data found [ 1526.544783][T27779] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1526.546864][T27779] fuse: fd is not a fuse device [ 1526.568418][T27779] sctp: [Deprecated]: syz.4.8225 (pid 27779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1526.568418][T27779] Use struct sctp_sack_info instead [ 1528.326391][T19532] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.326432][T19532] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.509516][T27788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1530.894621][T27658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.894752][T27658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.895044][T27658] bridge_slave_0: entered allmulticast mode [ 1531.434936][T27658] bridge_slave_0: entered promiscuous mode [ 1531.573722][T27658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.573975][T27658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.574231][T27658] bridge_slave_1: entered allmulticast mode [ 1531.633368][T27658] bridge_slave_1: entered promiscuous mode [ 1533.475527][T27658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.333438][T22706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1534.500284][T22706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1534.553576][T22706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1534.568323][T22706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1534.585231][T22706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1535.687701][T27658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.719214][T27662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.719347][T27662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.719614][T27662] bridge_slave_0: entered allmulticast mode [ 1535.802283][T27662] bridge_slave_0: entered promiscuous mode [ 1536.977928][T27809] 9p: Bad value for 'rfdno' [ 1537.626130][T22706] Bluetooth: hci3: command tx timeout [ 1537.774706][T27812] futex_wake_op: syz.7.8230 tries to shift op by 144; fix this program [ 1539.780453][T27659] Bluetooth: hci3: command tx timeout [ 1541.831275][T27659] Bluetooth: hci3: command tx timeout [ 1543.910401][T27659] Bluetooth: hci3: command tx timeout [ 1545.562357][T19532] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1545.562394][T19532] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.275490][T27662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.275636][T27662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.275922][T27662] bridge_slave_1: entered allmulticast mode [ 1546.295097][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.295168][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.420094][T27662] bridge_slave_1: entered promiscuous mode [ 1549.013448][T27844] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8239'. [ 1549.013474][T27844] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8239'. [ 1549.013535][T27844] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8239'. [ 1550.316904][T27658] team0: Port device team_slave_0 added [ 1550.574513][T27658] team0: Port device team_slave_1 added [ 1550.664310][T27662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.164899][T27662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.349105][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1551.877258][T27658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1551.877278][T27658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.877306][T27658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1551.939496][T27799]  speed is unknown, defaulting to 1000 [ 1552.076367][T27658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.076385][T27658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.076414][T27658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.192547][T27662] team0: Port device team_slave_0 added [ 1552.284891][T27662] team0: Port device team_slave_1 added [ 1554.304415][T27662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.304432][T27662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.304459][T27662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.450482][T27662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.450502][T27662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.450531][T27662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.580911][T27658] hsr_slave_0: entered promiscuous mode [ 1555.586418][T27658] hsr_slave_1: entered promiscuous mode [ 1555.602870][T27658] debugfs: 'hsr0' already exists in 'hsr' [ 1555.602897][T27658] Cannot create hsr debugfs directory [ 1561.014020][T22706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1561.072099][T22706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1561.111484][T22706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1561.141395][T22706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1561.163737][T22706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1561.623229][T27659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1561.699313][T27659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1561.701546][T27659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1561.704272][T27659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1561.705119][T27659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1562.965101][T19532] bridge_slave_1: left allmulticast mode [ 1562.965135][T19532] bridge_slave_1: left promiscuous mode [ 1562.996970][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.109301][T19532] bridge_slave_0: left allmulticast mode [ 1563.109335][T19532] bridge_slave_0: left promiscuous mode [ 1563.109602][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.195533][T19532] dvmrp0: left allmulticast mode [ 1563.430788][T22706] Bluetooth: hci0: command tx timeout [ 1563.728171][T27918] netlink: 'syz.7.8263': attribute type 7 has an invalid length. [ 1563.728196][T27918] netlink: 'syz.7.8263': attribute type 8 has an invalid length. [ 1563.728212][T27918] netlink: 'syz.7.8263': attribute type 9 has an invalid length. [ 1564.069226][T22706] Bluetooth: hci4: command tx timeout [ 1565.509183][T22706] Bluetooth: hci0: command tx timeout [ 1566.149260][T22706] Bluetooth: hci4: command tx timeout [ 1567.590348][T22706] Bluetooth: hci0: command tx timeout [ 1568.229175][T22706] Bluetooth: hci4: command tx timeout [ 1568.555196][T27662] hsr_slave_0: entered promiscuous mode [ 1568.573537][T27662] hsr_slave_1: entered promiscuous mode [ 1568.588114][T27662] debugfs: 'hsr0' already exists in 'hsr' [ 1568.588149][T27662] Cannot create hsr debugfs directory [ 1568.701693][T27913] syz_tun: entered allmulticast mode [ 1568.704389][T27913] syz_tun: left allmulticast mode [ 1568.857607][T19532] m1Ie5n: left promiscuous mode [ 1569.247134][T27936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8270'. [ 1569.669746][T22706] Bluetooth: hci0: command tx timeout [ 1570.309176][T22706] Bluetooth: hci4: command tx timeout [ 1570.791335][T27945] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8273'. [ 1571.480640][T19532] tipc: Disabling bearer [ 1571.481425][T19532] tipc: Left network mode [ 1571.973782][T27954] fuse: fd is not a fuse device [ 1574.296040][ T37] audit: type=1326 audit(1776552795.640:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27975 comm="syz.4.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1574.297678][ T37] audit: type=1326 audit(1776552795.640:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27975 comm="syz.4.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1574.347709][ T37] audit: type=1326 audit(1776552795.690:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27975 comm="syz.4.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1574.348138][ T37] audit: type=1326 audit(1776552795.690:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27975 comm="syz.4.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1574.348456][ T37] audit: type=1326 audit(1776552795.690:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27975 comm="syz.4.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1576.848351][T27964] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8280'. [ 1576.852801][T27904]  speed is unknown, defaulting to 1000 [ 1577.090138][T27907]  speed is unknown, defaulting to 1000 [ 1577.464945][T27799] chnl_net:caif_netlink_parms(): no params data found [ 1577.833460][T27996] openvswitch: netlink: IP tunnel TTL not specified. [ 1578.216273][ T37] audit: type=1326 audit(1776552799.550:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27999 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1578.216403][ T37] audit: type=1326 audit(1776552799.560:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27999 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1578.294323][ T37] audit: type=1326 audit(1776552799.620:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27999 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1578.294385][ T37] audit: type=1326 audit(1776552799.640:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27999 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1578.294446][ T37] audit: type=1326 audit(1776552799.640:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27999 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1584.589873][ T5464] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1584.973685][T27799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.973831][T27799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.974080][T27799] bridge_slave_0: entered allmulticast mode [ 1584.980301][T27799] bridge_slave_0: entered promiscuous mode [ 1585.168134][T28068] netlink: 'syz.4.8317': attribute type 21 has an invalid length. [ 1585.168162][T28068] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8317'. [ 1585.517497][T19532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.517532][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.551739][T19532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.551770][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.727156][T19532] veth1_macvtap: left promiscuous mode [ 1585.727300][T19532] veth0_macvtap: left promiscuous mode [ 1585.727564][T19532] veth1_vlan: left promiscuous mode [ 1585.727902][T19532] veth0_vlan: left promiscuous mode [ 1587.041111][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1587.231104][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1587.881347][T27799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.881496][T27799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.881822][T27799] bridge_slave_1: entered allmulticast mode [ 1588.005854][T27799] bridge_slave_1: entered promiscuous mode [ 1588.027895][T28068] netlink: 'syz.4.8317': attribute type 5 has an invalid length. [ 1588.027924][T28068] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8317'. [ 1588.743233][T27799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.865683][T27799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.202416][T28093] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1589.202448][T28093] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1589.204663][T28093] vhci_hcd vhci_hcd.0: Device attached [ 1589.286076][T28094] vhci_hcd: cannot find the pending unlink 2097409 [ 1589.286669][T28094] vhci_hcd: connection closed [ 1589.356660][T27410] vhci_hcd vhci_hcd.7: stop threads [ 1589.356690][T27410] vhci_hcd vhci_hcd.7: release socket [ 1589.436075][T27410] vhci_hcd vhci_hcd.7: disconnect device [ 1589.676828][T27799] team0: Port device team_slave_0 added [ 1590.040691][T27799] team0: Port device team_slave_1 added [ 1590.055481][T27904] chnl_net:caif_netlink_parms(): no params data found [ 1590.095142][T27907] chnl_net:caif_netlink_parms(): no params data found [ 1590.404098][T27799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.404119][T27799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.404167][T27799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1590.606136][T27799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1590.606158][T27799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.606191][T27799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.775889][T27904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.776039][T27904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.776473][T27904] bridge_slave_0: entered allmulticast mode [ 1591.845111][T27904] bridge_slave_0: entered promiscuous mode [ 1591.882840][T27907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.882994][T27907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.883261][T27907] bridge_slave_0: entered allmulticast mode [ 1591.945784][T27907] bridge_slave_0: entered promiscuous mode [ 1591.973587][T27904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.973749][T27904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.974014][T27904] bridge_slave_1: entered allmulticast mode [ 1592.020714][T27904] bridge_slave_1: entered promiscuous mode [ 1592.027515][T27907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.027683][T27907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.027923][T27907] bridge_slave_1: entered allmulticast mode [ 1592.116830][T27907] bridge_slave_1: entered promiscuous mode [ 1592.837606][T27904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.886900][T27659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1593.024143][T27659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1593.026740][T27659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1593.046117][T27659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1593.048550][T27659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1594.124744][T27907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.161591][T28126] ip6gre2: entered allmulticast mode [ 1594.308217][T27904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.337958][T27907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.725707][T28149] netlink: 'syz.7.8343': attribute type 21 has an invalid length. [ 1594.725734][T28149] IPv6: NLM_F_CREATE should be specified when creating new route [ 1595.199728][T27904] team0: Port device team_slave_0 added [ 1595.226712][T27907] team0: Port device team_slave_0 added [ 1595.232012][T27904] team0: Port device team_slave_1 added [ 1595.269610][T27907] team0: Port device team_slave_1 added [ 1595.284453][T27659] Bluetooth: hci2: command tx timeout [ 1597.093584][T28157] bond3: option primary_reselect: invalid value (4) [ 1597.357326][T27659] Bluetooth: hci2: command tx timeout [ 1598.306059][ T37] audit: type=1326 audit(1776552819.650:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28174 comm="syz.7.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1598.307967][ T37] audit: type=1326 audit(1776552819.650:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28174 comm="syz.7.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1598.365946][ T37] audit: type=1326 audit(1776552819.710:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28174 comm="syz.7.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1598.366284][ T37] audit: type=1326 audit(1776552819.710:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28174 comm="syz.7.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1598.366646][ T37] audit: type=1326 audit(1776552819.710:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28174 comm="syz.7.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1598.367020][ T37] audit: type=1326 audit(1776552819.710:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28174 comm="syz.7.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1598.367329][ T37] audit: type=1326 audit(1776552819.710:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28174 comm="syz.7.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1598.367834][ T37] audit: type=1326 audit(1776552819.710:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28174 comm="syz.7.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1598.368286][ T37] audit: type=1326 audit(1776552819.710:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28174 comm="syz.7.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f71fa68c819 code=0x7ffc0000 [ 1598.687216][T28157] bond3 (unregistering): Released all slaves [ 1598.861682][ T5464] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1599.030123][T27904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1599.030142][T27904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.030173][T27904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1599.315875][T28180] 9p: Unknown access argument 18446744073709551615: -34 [ 1599.429199][T27659] Bluetooth: hci2: command tx timeout [ 1600.292238][T27907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1600.292258][T27907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.292290][T27907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1600.292981][T28118]  speed is unknown, defaulting to 1000 [ 1600.295533][T27904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1600.295548][T27904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.295576][T27904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1600.467385][T27907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1600.467404][T27907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.467434][T27907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.508998][T27659] Bluetooth: hci2: command tx timeout [ 1601.669757][T28197] 8021q: VLANs not supported on ipvlan0 [ 1601.761788][T27904] hsr_slave_0: entered promiscuous mode [ 1601.763259][T27904] hsr_slave_1: entered promiscuous mode [ 1601.764148][T27904] debugfs: 'hsr0' already exists in 'hsr' [ 1601.764171][T27904] Cannot create hsr debugfs directory [ 1601.916010][T27907] hsr_slave_0: entered promiscuous mode [ 1601.934497][T27907] hsr_slave_1: entered promiscuous mode [ 1601.940931][T27907] debugfs: 'hsr0' already exists in 'hsr' [ 1601.940960][T27907] Cannot create hsr debugfs directory [ 1603.667075][ T37] audit: type=1326 audit(1776552825.010:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28220 comm="syz.4.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1603.697813][ T37] audit: type=1326 audit(1776552825.010:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28220 comm="syz.4.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1603.731889][ T37] audit: type=1326 audit(1776552825.080:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28220 comm="syz.4.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1603.734082][ T37] audit: type=1326 audit(1776552825.080:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28220 comm="syz.4.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1603.734136][ T37] audit: type=1326 audit(1776552825.080:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28220 comm="syz.4.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1606.095338][ T5464] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1606.274475][T28240] netlink: 'syz.7.8376': attribute type 1 has an invalid length. [ 1606.998191][T28118] chnl_net:caif_netlink_parms(): no params data found [ 1607.680452][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.680528][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.975445][T28280] netlink: 'syz.4.8395': attribute type 10 has an invalid length. [ 1609.756298][T28280] xfrm0: entered promiscuous mode [ 1609.758111][T28280] team0: Device xfrm0 is of different type [ 1610.510859][T28290] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8399'. [ 1612.803097][T28118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.803351][T28118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.803626][T28118] bridge_slave_0: entered allmulticast mode [ 1612.808440][T28118] bridge_slave_0: entered promiscuous mode [ 1614.374229][T28118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.374431][T28118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.374714][T28118] bridge_slave_1: entered allmulticast mode [ 1614.414906][T28118] bridge_slave_1: entered promiscuous mode [ 1614.525364][T28118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.591737][T28118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.885740][T28118] team0: Port device team_slave_0 added [ 1616.797034][T28118] team0: Port device team_slave_1 added [ 1616.798085][T28349] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1616.962460][ T5464] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1618.439516][T28118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.439537][T28118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.439583][T28118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.571735][T28118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1618.571757][T28118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.571790][T28118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.867451][T28407] trusted_key: encrypted_key: master key parameter '' is invalid [ 1620.982797][T22706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1621.054225][T22706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1621.124695][T22706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1621.202729][T22706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1621.203694][T22706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1622.187397][T22706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1622.268109][T22706] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1622.282486][T22706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1622.376631][T22706] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1622.414691][T22706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1623.429183][T22706] Bluetooth: hci3: command tx timeout [ 1624.549102][T22706] Bluetooth: hci6: command tx timeout [ 1625.248774][T28118] hsr_slave_0: entered promiscuous mode [ 1625.267783][T28118] hsr_slave_1: entered promiscuous mode [ 1625.282012][T28118] debugfs: 'hsr0' already exists in 'hsr' [ 1625.282041][T28118] Cannot create hsr debugfs directory [ 1625.508967][T22706] Bluetooth: hci3: command tx timeout [ 1626.629339][T22706] Bluetooth: hci6: command tx timeout [ 1627.593937][T22706] Bluetooth: hci3: command tx timeout [ 1628.709003][T22706] Bluetooth: hci6: command tx timeout [ 1629.669104][T22706] Bluetooth: hci3: command tx timeout [ 1630.789027][T22706] Bluetooth: hci6: command tx timeout [ 1630.926147][T28417]  speed is unknown, defaulting to 1000 [ 1632.296495][T19532] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.396341][T28428]  speed is unknown, defaulting to 1000 [ 1632.497052][T28561] macsec2: entered promiscuous mode [ 1632.497082][T28561] macsec2: entered allmulticast mode [ 1634.348395][T28589] netlink: 'syz.4.8485': attribute type 2 has an invalid length. [ 1638.825950][T19532] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.426065][T19532] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.223522][T28738] netlink: 'syz.4.8521': attribute type 8 has an invalid length. [ 1645.558113][T28746] siw: device registration error -23 [ 1649.850721][T19532] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.570750][T27659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1651.652000][T27659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1651.653890][T27659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1651.655523][T27659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1651.656933][T27659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1653.870620][T28838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8567'. [ 1653.870821][T28838] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8567'. [ 1653.912358][T22706] Bluetooth: hci4: command tx timeout [ 1654.337626][T28840] nftables ruleset with unbound set [ 1654.616150][T28815]  speed is unknown, defaulting to 1000 [ 1655.657842][T28428] chnl_net:caif_netlink_parms(): no params data found [ 1655.691815][T28417] chnl_net:caif_netlink_parms(): no params data found [ 1655.989057][T22706] Bluetooth: hci4: command tx timeout [ 1658.069217][T22706] Bluetooth: hci4: command tx timeout [ 1659.615856][T28853] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8572'. [ 1659.746424][T28848] netlink: 212 bytes leftover after parsing attributes in process `syz.7.8570'. [ 1659.746449][T28848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8570'. [ 1659.746464][T28848] tc_dump_action: action bad kind [ 1660.149289][T22706] Bluetooth: hci4: command tx timeout [ 1661.239381][T28876] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8580'. [ 1661.569906][T19532] bridge_slave_1: left allmulticast mode [ 1661.569941][T19532] bridge_slave_1: left promiscuous mode [ 1661.570214][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.988575][T28889] overlayfs: failed to clone lowerpath [ 1662.221942][T19532] bridge_slave_0: left allmulticast mode [ 1662.221976][T19532] bridge_slave_0: left promiscuous mode [ 1662.222256][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.353892][T19532] bridge_slave_1: left allmulticast mode [ 1662.353926][T19532] bridge_slave_1: left promiscuous mode [ 1662.354319][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.426565][T19532] bridge_slave_0: left allmulticast mode [ 1662.426597][T19532] bridge_slave_0: left promiscuous mode [ 1662.452892][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.592769][T19532] bridge_slave_1: left allmulticast mode [ 1662.592803][T19532] bridge_slave_1: left promiscuous mode [ 1662.593045][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.647148][T19532] bridge_slave_0: left allmulticast mode [ 1662.647181][T19532] bridge_slave_0: left promiscuous mode [ 1662.647533][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.823984][T19532] bridge_slave_1: left allmulticast mode [ 1662.824018][T19532] bridge_slave_1: left promiscuous mode [ 1662.824298][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.901957][T19532] bridge_slave_0: left allmulticast mode [ 1662.901992][T19532] bridge_slave_0: left promiscuous mode [ 1662.902511][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.406565][T19532] bridge_slave_1: left allmulticast mode [ 1663.406599][T19532] bridge_slave_1: left promiscuous mode [ 1663.406953][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.483858][T19532] bridge_slave_0: left allmulticast mode [ 1663.483890][T19532] bridge_slave_0: left promiscuous mode [ 1663.484147][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.175521][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.232459][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.285899][T19532] bond0 (unregistering): Released all slaves [ 1664.542868][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.601920][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.646334][T19532] bond0 (unregistering): Released all slaves [ 1665.012279][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1665.084249][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1665.153286][T19532] bond0 (unregistering): Released all slaves [ 1665.462778][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1665.502675][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1665.564348][T19532] bond0 (unregistering): Released all slaves [ 1666.601086][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1666.661720][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1666.695155][T19532] bond0 (unregistering): Released all slaves [ 1668.888763][T28428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.890418][T28428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.890675][T28428] bridge_slave_0: entered allmulticast mode [ 1668.893755][T28428] bridge_slave_0: entered promiscuous mode [ 1669.101247][T28428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.101388][T28428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.101689][T28428] bridge_slave_1: entered allmulticast mode [ 1669.104736][T28428] bridge_slave_1: entered promiscuous mode [ 1669.106741][T28417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.106906][T28417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.107121][T28417] bridge_slave_0: entered allmulticast mode [ 1669.125670][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.125746][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.217220][T28417] bridge_slave_0: entered promiscuous mode [ 1669.436734][T28417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.436863][T28417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.437083][T28417] bridge_slave_1: entered allmulticast mode [ 1669.440811][T28417] bridge_slave_1: entered promiscuous mode [ 1670.176041][T19532] IPVS: stopping backup sync thread 22709 ... [ 1670.461699][T28930] macvlan0: entered promiscuous mode [ 1670.462619][T28930] netlink: 'syz.4.8603': attribute type 1 has an invalid length. [ 1670.462639][T28930] netlink: 'syz.4.8603': attribute type 2 has an invalid length. [ 1670.536159][T28428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.622495][T28417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.654265][T28428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.765609][T28417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.807919][T28978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8614'. [ 1674.715911][T28815] chnl_net:caif_netlink_parms(): no params data found [ 1674.963896][T28428] team0: Port device team_slave_0 added [ 1674.975922][T28417] team0: Port device team_slave_0 added [ 1677.845454][T28417] team0: Port device team_slave_1 added [ 1677.943261][T28428] team0: Port device team_slave_1 added [ 1681.765882][T27659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1681.938228][T27659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1681.951372][T27659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1681.952996][T27659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1681.953745][T27659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1682.217826][T29023] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1682.218080][T29023] pim6reg0: linktype set to 776 [ 1682.556850][T27659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1682.625972][T27659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1682.645045][T27659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1682.699289][T27659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1682.743778][T27659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1684.149393][T27659] Bluetooth: hci0: command tx timeout [ 1684.934934][T27659] Bluetooth: hci2: command tx timeout [ 1686.238588][T27659] Bluetooth: hci0: command tx timeout [ 1686.949253][T27659] Bluetooth: hci2: command tx timeout [ 1688.309443][T27659] Bluetooth: hci0: command tx timeout [ 1688.776890][T28815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.777142][T28815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.777432][T28815] bridge_slave_0: entered allmulticast mode [ 1688.815359][T28815] bridge_slave_0: entered promiscuous mode [ 1688.848533][T29065]  speed is unknown, defaulting to 1000 [ 1688.855690][T28815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.855894][T28815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.856196][T28815] bridge_slave_1: entered allmulticast mode [ 1688.885723][T28815] bridge_slave_1: entered promiscuous mode [ 1688.899105][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.920747][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.029205][T27659] Bluetooth: hci2: command tx timeout [ 1690.389036][T27659] Bluetooth: hci0: command tx timeout [ 1690.950526][T19532] hsr_slave_0: left promiscuous mode [ 1691.000872][T19532] hsr_slave_1: left promiscuous mode [ 1691.002041][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1691.037691][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1691.109176][T27659] Bluetooth: hci2: command tx timeout [ 1692.082420][T19532] hsr_slave_0: left promiscuous mode [ 1692.179110][T19532] hsr_slave_1: left promiscuous mode [ 1692.180238][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.210015][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.389253][T19532] hsr_slave_0: left promiscuous mode [ 1692.429161][T19532] hsr_slave_1: left promiscuous mode [ 1692.430197][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.459968][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.699024][T19532] hsr_slave_0: left promiscuous mode [ 1692.738995][T19532] hsr_slave_1: left promiscuous mode [ 1692.740206][T19532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1692.740231][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.780632][T19532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1692.780661][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.630154][T19532] veth1_macvtap: left promiscuous mode [ 1693.630264][T19532] veth0_macvtap: left promiscuous mode [ 1693.630520][T19532] veth1_vlan: left promiscuous mode [ 1693.630711][T19532] veth0_vlan: left promiscuous mode [ 1694.208412][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1694.301148][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1694.910492][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1695.021892][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1695.478412][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1695.590719][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1696.356674][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1696.443670][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1697.640838][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1697.702310][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1698.064844][T29076]  speed is unknown, defaulting to 1000 [ 1698.412794][T28815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1698.569589][T28815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1698.995792][T28815] team0: Port device team_slave_0 added [ 1699.031363][T28815] team0: Port device team_slave_1 added [ 1699.575472][T28815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.575498][T28815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.575529][T28815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.772782][T28815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.772801][T28815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.772829][T28815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.429809][T28815] hsr_slave_0: entered promiscuous mode [ 1700.431711][T28815] hsr_slave_1: entered promiscuous mode [ 1700.432956][T28815] debugfs: 'hsr0' already exists in 'hsr' [ 1700.432986][T28815] Cannot create hsr debugfs directory [ 1701.007435][T29065] chnl_net:caif_netlink_parms(): no params data found [ 1701.091221][T29076] chnl_net:caif_netlink_parms(): no params data found [ 1702.838623][T29065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.838760][T29065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.839369][T29065] bridge_slave_0: entered allmulticast mode [ 1702.842870][T29065] bridge_slave_0: entered promiscuous mode [ 1702.998308][T29065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.998532][T29065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.998763][T29065] bridge_slave_1: entered allmulticast mode [ 1703.046855][T29065] bridge_slave_1: entered promiscuous mode [ 1703.066817][T29076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.066965][T29076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.067554][T29076] bridge_slave_0: entered allmulticast mode [ 1703.098285][T29076] bridge_slave_0: entered promiscuous mode [ 1703.247190][T29076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.247320][T29076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.267959][T29076] bridge_slave_1: entered allmulticast mode [ 1703.296768][T29076] bridge_slave_1: entered promiscuous mode [ 1703.761248][T29065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.930730][T29065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.966351][T29076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.242027][T29076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.415314][ T5464] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1706.523139][T29065] team0: Port device team_slave_0 added [ 1706.588075][T29065] team0: Port device team_slave_1 added [ 1706.640485][T29250] netlink: 'syz.7.8691': attribute type 11 has an invalid length. [ 1707.195559][T29076] team0: Port device team_slave_0 added [ 1707.762475][T29076] team0: Port device team_slave_1 added [ 1707.765288][T29065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.765314][T29065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.766641][T29065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.695355][T29065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1709.695374][T29065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1709.695404][T29065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.198126][T29076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1710.198146][T29076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.198179][T29076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.276831][T29076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1710.276854][T29076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.276889][T29076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.546563][T28815] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1710.903272][T28815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1711.242892][T28815] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1711.481663][T28815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1711.581667][T29065] hsr_slave_0: entered promiscuous mode [ 1711.587677][T29065] hsr_slave_1: entered promiscuous mode [ 1711.606246][T29065] debugfs: 'hsr0' already exists in 'hsr' [ 1711.606274][T29065] Cannot create hsr debugfs directory [ 1712.210019][T22706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1712.301375][T22706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1712.321979][T22706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1712.323656][T22706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1712.354954][T22706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1713.702492][T29076] hsr_slave_0: entered promiscuous mode [ 1713.703984][T29076] hsr_slave_1: entered promiscuous mode [ 1713.705011][T29076] debugfs: 'hsr0' already exists in 'hsr' [ 1713.705038][T29076] Cannot create hsr debugfs directory [ 1714.514360][T29311]  speed is unknown, defaulting to 1000 [ 1714.552140][T27659] Bluetooth: hci3: command tx timeout [ 1716.629066][T22706] Bluetooth: hci3: command tx timeout [ 1718.709085][T22706] Bluetooth: hci3: command tx timeout [ 1719.714566][T29374] overlayfs: failed to resolve './cgroup': -2 [ 1720.789072][T22706] Bluetooth: hci3: command tx timeout [ 1721.129214][T29311] chnl_net:caif_netlink_parms(): no params data found [ 1724.983337][T29430] Bluetooth: MGMT ver 1.23 [ 1727.850869][T29311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.851014][T29311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.872643][T29311] bridge_slave_0: entered allmulticast mode [ 1727.975870][T29311] bridge_slave_0: entered promiscuous mode [ 1728.108320][T29311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.108454][T29311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.110292][T29311] bridge_slave_1: entered allmulticast mode [ 1728.154133][T29311] bridge_slave_1: entered promiscuous mode [ 1729.137229][T29311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.191710][T29311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.325599][T29311] team0: Port device team_slave_0 added [ 1729.385833][T29311] team0: Port device team_slave_1 added [ 1729.574557][T29311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.574576][T29311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1729.574613][T29311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.645215][T29311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.645233][T29311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1729.645262][T29311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1730.556294][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.556402][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.171787][T29311] hsr_slave_0: entered promiscuous mode [ 1731.252070][T29311] hsr_slave_1: entered promiscuous mode [ 1731.255369][T29311] debugfs: 'hsr0' already exists in 'hsr' [ 1731.255397][T29311] Cannot create hsr debugfs directory [ 1731.554075][ T5464] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1735.563450][ T5464] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1737.325784][T29552] uprobe: syz.4.8733:29552 failed to unregister, leaking uprobe [ 1738.143217][ T5464] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1740.770373][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 1740.770401][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 1741.800082][T27659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1741.956442][T27659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1741.958476][T27659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1741.974622][T27659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1741.975622][T27659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1742.613889][T22706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1742.677684][T22706] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1742.687022][T22706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1742.702791][T22706] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1742.704146][T22706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1743.834404][T29605]  speed is unknown, defaulting to 1000 [ 1743.883349][T29622]  speed is unknown, defaulting to 1000 [ 1744.151818][T22706] Bluetooth: hci4: command tx timeout [ 1744.789141][T22706] Bluetooth: hci6: command tx timeout [ 1746.106471][T29605] chnl_net:caif_netlink_parms(): no params data found [ 1746.337158][T22706] Bluetooth: hci4: command tx timeout [ 1746.815226][T29076] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 1746.956868][T22706] Bluetooth: hci6: command tx timeout [ 1747.743483][T29622] chnl_net:caif_netlink_parms(): no params data found [ 1748.389481][T22706] Bluetooth: hci4: command tx timeout [ 1749.117084][T22706] Bluetooth: hci6: command tx timeout [ 1750.176507][T29605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.176752][T29605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.177355][T29605] bridge_slave_0: entered allmulticast mode [ 1750.225729][T29605] bridge_slave_0: entered promiscuous mode [ 1750.436037][T29605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.436183][T29605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.436506][T29605] bridge_slave_1: entered allmulticast mode [ 1750.469485][T27659] Bluetooth: hci4: command tx timeout [ 1750.495254][T29605] bridge_slave_1: entered promiscuous mode [ 1751.189122][T27659] Bluetooth: hci6: command tx timeout [ 1754.790484][T29622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.790621][T29622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.790997][T29622] bridge_slave_0: entered allmulticast mode [ 1754.793964][T29622] bridge_slave_0: entered promiscuous mode [ 1754.986511][T29605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1755.354236][T29738] tipc: Started in network mode [ 1755.354272][T29738] tipc: Node identity fffffff8, cluster identity 8 [ 1755.354288][T29738] tipc: Node number set to 4294967288 [ 1755.404964][T29622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.405114][T29622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.405501][T29622] bridge_slave_1: entered allmulticast mode [ 1755.435019][T29622] bridge_slave_1: entered promiscuous mode [ 1755.461785][T29605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1756.150868][T29622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1756.186630][T29605] team0: Port device team_slave_0 added [ 1756.322820][T29605] team0: Port device team_slave_1 added [ 1756.372488][T29622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.103903][T29605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1757.103923][T29605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.103954][T29605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.236180][T29622] team0: Port device team_slave_0 added [ 1757.513954][T29605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1757.513976][T29605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.514011][T29605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.582369][T29622] team0: Port device team_slave_1 added [ 1760.798130][T19532] bridge_slave_1: left allmulticast mode [ 1760.798166][T19532] bridge_slave_1: left promiscuous mode [ 1760.798464][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.917194][T19532] bridge_slave_0: left allmulticast mode [ 1760.917229][T19532] bridge_slave_0: left promiscuous mode [ 1760.917526][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.229668][T19532] bridge_slave_1: left allmulticast mode [ 1761.229702][T19532] bridge_slave_1: left promiscuous mode [ 1761.230108][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.308025][T19532] bridge_slave_0: left allmulticast mode [ 1761.308059][T19532] bridge_slave_0: left promiscuous mode [ 1761.308331][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.466275][T19532] bridge_slave_1: left allmulticast mode [ 1761.466309][T19532] bridge_slave_1: left promiscuous mode [ 1761.479512][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.561378][T19532] bridge_slave_0: left allmulticast mode [ 1761.561410][T19532] bridge_slave_0: left promiscuous mode [ 1761.561665][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.675056][T19532] bridge_slave_1: left allmulticast mode [ 1761.675086][T19532] bridge_slave_1: left promiscuous mode [ 1761.675369][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.743350][T19532] bridge_slave_0: left allmulticast mode [ 1761.743383][T19532] bridge_slave_0: left promiscuous mode [ 1761.743658][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.880494][T19532] bridge_slave_1: left allmulticast mode [ 1761.880531][T19532] bridge_slave_1: left promiscuous mode [ 1761.880797][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.956114][T19532] bridge_slave_0: left allmulticast mode [ 1761.956150][T19532] bridge_slave_0: left promiscuous mode [ 1761.956459][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.100531][T19532] bridge_slave_1: left allmulticast mode [ 1762.100564][T19532] bridge_slave_1: left promiscuous mode [ 1762.100837][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.162857][T19532] bridge_slave_0: left allmulticast mode [ 1762.162890][T19532] bridge_slave_0: left promiscuous mode [ 1762.163155][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.322927][T19532] bridge_slave_1: left allmulticast mode [ 1762.322962][T19532] bridge_slave_1: left promiscuous mode [ 1762.323218][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.381881][T19532] bridge_slave_0: left allmulticast mode [ 1762.381916][T19532] bridge_slave_0: left promiscuous mode [ 1762.382170][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.794756][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.869050][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.930833][T19532] bond0 (unregistering): Released all slaves [ 1763.291613][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1763.420462][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1763.486639][T19532] bond0 (unregistering): Released all slaves [ 1763.768750][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1763.842105][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1763.899859][T19532] bond0 (unregistering): Released all slaves [ 1764.117431][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1764.257969][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1764.311655][T19532] bond0 (unregistering): Released all slaves [ 1764.602067][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1764.688195][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1764.756300][T19532] bond0 (unregistering): Released all slaves [ 1765.015247][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1765.079430][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1765.155527][T19532] bond0 (unregistering): Released all slaves [ 1765.428633][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1765.522456][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1765.621654][T19532] bond0 (unregistering): Released all slaves [ 1766.473308][T29789] netlink: 'syz.7.8774': attribute type 1 has an invalid length. [ 1766.914196][T29622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1766.914216][T29622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.914247][T29622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.252627][T29789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1767.697739][T29791] bond3: (slave dummy0): making interface the new active one [ 1767.730415][T29791] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1768.011411][T29622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1768.011429][T29622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1768.011459][T29622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1768.596117][T29605] hsr_slave_0: entered promiscuous mode [ 1768.597553][T29605] hsr_slave_1: entered promiscuous mode [ 1768.639535][T29605] debugfs: 'hsr0' already exists in 'hsr' [ 1768.639566][T29605] Cannot create hsr debugfs directory [ 1769.832845][T29622] hsr_slave_0: entered promiscuous mode [ 1769.847831][T29622] hsr_slave_1: entered promiscuous mode [ 1769.850911][T29622] debugfs: 'hsr0' already exists in 'hsr' [ 1769.850940][T29622] Cannot create hsr debugfs directory [ 1769.851432][T29311] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1770.569858][T29311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1770.811259][T29311] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1771.226164][T29311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1771.297352][T29311] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1772.414553][T29311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1772.596226][T29311] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1773.041186][T29311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1775.176205][T22706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1775.320965][T22706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1776.026524][T22706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1776.027992][T22706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1776.028938][T22706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1778.037793][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1778.216142][T29870] overlayfs: failed to resolve './cgroup': -2 [ 1778.981047][T22706] Bluetooth: hci0: command tx timeout [ 1779.265351][T19532] hsr_slave_0: left promiscuous mode [ 1779.362392][T19532] hsr_slave_1: left promiscuous mode [ 1779.363480][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1779.400146][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1780.427300][T29880] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8794'. [ 1780.494338][T19532] hsr_slave_0: left promiscuous mode [ 1780.598859][T19532] hsr_slave_1: left promiscuous mode [ 1780.600997][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1780.660947][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1780.723745][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806032a800: rx timeout, send abort [ 1780.997491][T19532] hsr_slave_0: left promiscuous mode [ 1781.094948][T19532] hsr_slave_1: left promiscuous mode [ 1781.096267][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.130033][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.237067][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060329000: rx timeout, send abort [ 1781.261903][T22706] Bluetooth: hci0: command tx timeout [ 1781.269138][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806032a800: abort rx timeout. Force session deactivation [ 1781.285145][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888060329000: connection exists (fe ff). last cmd: 20 [ 1781.377967][T19532] hsr_slave_0: left promiscuous mode [ 1781.409429][T19532] hsr_slave_1: left promiscuous mode [ 1781.410528][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.448346][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.555520][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032ca9400: rx timeout, send abort [ 1781.626082][T19532] hsr_slave_0: left promiscuous mode [ 1781.647838][T19532] hsr_slave_1: left promiscuous mode [ 1781.648984][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.682877][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1782.097481][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032ca9400: abort rx timeout. Force session deactivation [ 1782.320947][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1782.411212][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1783.307293][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1783.381985][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1783.500296][T22706] Bluetooth: hci0: command tx timeout [ 1783.851023][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1783.925250][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1784.374398][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1784.449047][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1785.225542][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1785.344112][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1785.754725][T22706] Bluetooth: hci0: command tx timeout [ 1786.125968][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1786.214716][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1787.005119][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1787.171627][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1788.304676][T27659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1788.394150][T27659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1788.396070][T27659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1788.397588][T27659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1788.420819][T27659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1790.869813][T22706] Bluetooth: hci2: command tx timeout [ 1792.177162][T29842]  speed is unknown, defaulting to 1000 [ 1792.262975][T29882]  speed is unknown, defaulting to 1000 [ 1793.124094][T22706] Bluetooth: hci2: command tx timeout [ 1793.522386][T29911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1793.522413][T29911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1794.523626][T29918] fuse: fd is not a fuse device [ 1794.705730][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1794.714271][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.379818][T22706] Bluetooth: hci2: command tx timeout [ 1796.788409][T29939] bond0: (slave team0): Releasing backup interface [ 1796.976158][T29939] team0 (unregistering): left promiscuous mode [ 1796.976202][T29939] bond2: left promiscuous mode [ 1797.226443][T29939] team0 (unregistering): Port device bond2 removed [ 1797.632525][T27659] Bluetooth: hci2: command tx timeout [ 1799.469085][T29842] chnl_net:caif_netlink_parms(): no params data found [ 1799.625418][T29882] chnl_net:caif_netlink_parms(): no params data found [ 1800.233836][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1800.951461][T29977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1801.161057][T29842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.161283][T29842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.161593][T29842] bridge_slave_0: entered allmulticast mode [ 1801.268203][T29842] bridge_slave_0: entered promiscuous mode [ 1801.405356][T29842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.405496][T29842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.405719][T29842] bridge_slave_1: entered allmulticast mode [ 1801.410917][T29842] bridge_slave_1: entered promiscuous mode [ 1802.277968][T29882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.278142][T29882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.278388][T29882] bridge_slave_0: entered allmulticast mode [ 1802.402130][T29882] bridge_slave_0: entered promiscuous mode [ 1802.538204][T29882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.538370][T29882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.538764][T29882] bridge_slave_1: entered allmulticast mode [ 1802.572095][T29882] bridge_slave_1: entered promiscuous mode [ 1802.608690][T29842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1802.659109][T29842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1803.666440][T29882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.388285][T29882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.394564][T29842] team0: Port device team_slave_0 added [ 1804.798448][T29842] team0: Port device team_slave_1 added [ 1805.144640][T29882] team0: Port device team_slave_0 added [ 1805.231920][T29882] team0: Port device team_slave_1 added [ 1805.238617][T29842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.238636][T29842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.238667][T29842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.389431][T29842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.389452][T29842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.389485][T29842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.220857][T30016] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1807.398389][T30016] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1807.465735][T30016] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1807.498653][T30016] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1807.525860][T30016] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1808.485501][T27659] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1808.543506][T27659] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1808.554321][T27659] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1808.556544][T27659] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1808.576230][T27659] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1809.667580][ T37] audit: type=1326 audit(1776553027.158:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.669555][ T37] audit: type=1326 audit(1776553027.158:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.731799][ T37] audit: type=1326 audit(1776553027.158:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.733936][ T37] audit: type=1326 audit(1776553027.222:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.734261][ T37] audit: type=1326 audit(1776553027.222:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.734739][ T37] audit: type=1326 audit(1776553027.222:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.735393][ T37] audit: type=1326 audit(1776553027.222:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.735694][ T37] audit: type=1326 audit(1776553027.222:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.736222][ T37] audit: type=1326 audit(1776553027.222:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.736785][ T37] audit: type=1326 audit(1776553027.222:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30034 comm="syz.4.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedaa79c819 code=0x7ffc0000 [ 1809.772211][T30016] Bluetooth: hci3: command tx timeout [ 1810.612590][T29882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1810.612612][T29882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.612644][T29882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1810.736001][T29882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1810.736022][T29882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.736057][T29882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1810.902880][T30016] Bluetooth: hci5: command tx timeout [ 1811.230126][T29842] hsr_slave_0: entered promiscuous mode [ 1811.231736][T29842] hsr_slave_1: entered promiscuous mode [ 1811.232860][T29842] debugfs: 'hsr0' already exists in 'hsr' [ 1811.232889][T29842] Cannot create hsr debugfs directory [ 1811.420106][T29882] hsr_slave_0: entered promiscuous mode [ 1811.421715][T29882] hsr_slave_1: entered promiscuous mode [ 1811.422828][T29882] debugfs: 'hsr0' already exists in 'hsr' [ 1811.422857][T29882] Cannot create hsr debugfs directory [ 1811.563257][T30023]  speed is unknown, defaulting to 1000 [ 1811.674952][T30013]  speed is unknown, defaulting to 1000 [ 1812.100472][T30016] Bluetooth: hci3: command tx timeout [ 1813.152025][T30016] Bluetooth: hci5: command tx timeout [ 1814.367070][T30016] Bluetooth: hci3: command tx timeout [ 1815.486877][T30016] Bluetooth: hci5: command tx timeout [ 1816.620769][T30016] Bluetooth: hci3: command tx timeout [ 1816.974334][T30049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1817.077431][T30049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1817.139898][T30049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1817.660448][T30016] Bluetooth: hci5: command tx timeout [ 1821.271472][T30065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8824'. [ 1824.145945][T30023] chnl_net:caif_netlink_parms(): no params data found [ 1824.913709][T30013] chnl_net:caif_netlink_parms(): no params data found [ 1825.813529][T30023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.813703][T30023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.813919][T30023] bridge_slave_0: entered allmulticast mode [ 1825.816888][T30023] bridge_slave_0: entered promiscuous mode [ 1825.880999][T30023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.881136][T30023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.881397][T30023] bridge_slave_1: entered allmulticast mode [ 1825.885472][T30023] bridge_slave_1: entered promiscuous mode [ 1826.005910][T30013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1826.006146][T30013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.006382][T30013] bridge_slave_0: entered allmulticast mode [ 1826.009715][T30013] bridge_slave_0: entered promiscuous mode [ 1826.063197][T30023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.111500][T30023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.111956][T30013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.112181][T30013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.112416][T30013] bridge_slave_1: entered allmulticast mode [ 1826.146849][T30013] bridge_slave_1: entered promiscuous mode [ 1826.282820][T30023] team0: Port device team_slave_0 added [ 1826.317283][T30013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.352101][T30023] team0: Port device team_slave_1 added [ 1826.362936][T30013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.669033][T30023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1826.669055][T30023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.669095][T30023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.749304][T30013] team0: Port device team_slave_0 added [ 1827.384470][T30023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1827.384491][T30023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1827.384525][T30023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1827.388449][T30013] team0: Port device team_slave_1 added [ 1827.711551][T30013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1827.711571][T30013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1827.711602][T30013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1827.714631][T30013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1827.714648][T30013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1827.714681][T30013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1827.869275][T30023] hsr_slave_0: entered promiscuous mode [ 1827.877477][T30023] hsr_slave_1: entered promiscuous mode [ 1827.878687][T30023] debugfs: 'hsr0' already exists in 'hsr' [ 1827.878716][T30023] Cannot create hsr debugfs directory [ 1828.022282][T30013] hsr_slave_0: entered promiscuous mode [ 1828.023932][T30013] hsr_slave_1: entered promiscuous mode [ 1828.025074][T30013] debugfs: 'hsr0' already exists in 'hsr' [ 1828.025101][T30013] Cannot create hsr debugfs directory [ 1840.427620][T27659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1840.494023][T27659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1840.503351][T27659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1840.547035][T27659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1841.534364][T27659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1843.936576][T30016] Bluetooth: hci4: command tx timeout [ 1844.123853][T30209]  speed is unknown, defaulting to 1000 [ 1844.806332][T30209] chnl_net:caif_netlink_parms(): no params data found [ 1845.329336][T30209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.329524][T30209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.329830][T30209] bridge_slave_0: entered allmulticast mode [ 1845.339666][T30209] bridge_slave_0: entered promiscuous mode [ 1845.397625][T30209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.397864][T30209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.398150][T30209] bridge_slave_1: entered allmulticast mode [ 1845.404573][T30209] bridge_slave_1: entered promiscuous mode [ 1845.553656][T30209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.582957][T30209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.781340][T30209] team0: Port device team_slave_0 added [ 1845.797098][T30209] team0: Port device team_slave_1 added [ 1845.903790][T30209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1845.903811][T30209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1845.903843][T30209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1845.977793][T30209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1845.977815][T30209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1845.977848][T30209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1846.185584][T30016] Bluetooth: hci4: command tx timeout [ 1846.192342][T30209] hsr_slave_0: entered promiscuous mode [ 1846.212526][T30209] hsr_slave_1: entered promiscuous mode [ 1846.217532][T30209] debugfs: 'hsr0' already exists in 'hsr' [ 1846.217579][T30209] Cannot create hsr debugfs directory [ 1848.439814][T30016] Bluetooth: hci4: command tx timeout [ 1850.702981][T30016] Bluetooth: hci4: command tx timeout [ 1853.132817][T19532] bridge_slave_1: left allmulticast mode [ 1853.132852][T19532] bridge_slave_1: left promiscuous mode [ 1853.133139][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.179968][T19532] bridge_slave_0: left allmulticast mode [ 1853.180002][T19532] bridge_slave_0: left promiscuous mode [ 1853.180304][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.339696][T19532] bridge_slave_1: left allmulticast mode [ 1853.339731][T19532] bridge_slave_1: left promiscuous mode [ 1853.339987][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.440396][T19532] bridge_slave_0: left allmulticast mode [ 1853.440429][T19532] bridge_slave_0: left promiscuous mode [ 1853.440684][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.749808][T27659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1853.823186][T27659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1853.825125][T27659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1853.843629][T27659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1853.868102][T27659] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1854.155738][T19532] bridge_slave_1: left allmulticast mode [ 1854.155773][T19532] bridge_slave_1: left promiscuous mode [ 1854.156026][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.241081][T19532] bridge_slave_0: left allmulticast mode [ 1854.241115][T19532] bridge_slave_0: left promiscuous mode [ 1854.241379][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.414354][T19532] bridge_slave_1: left allmulticast mode [ 1854.414389][T19532] bridge_slave_1: left promiscuous mode [ 1854.414647][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.502543][T19532] bridge_slave_0: left allmulticast mode [ 1854.502578][T19532] bridge_slave_0: left promiscuous mode [ 1854.502836][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.945894][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1855.142104][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1855.212807][T19532] bond0 (unregistering): Released all slaves [ 1855.499548][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1855.583710][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1855.652232][T19532] bond0 (unregistering): Released all slaves [ 1855.964949][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1856.061722][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1856.070013][T30016] Bluetooth: hci6: command tx timeout [ 1856.124954][T19532] bond0 (unregistering): Released all slaves [ 1856.390164][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1856.473313][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1856.542742][T19532] bond0 (unregistering): Released all slaves [ 1856.873480][T30300]  speed is unknown, defaulting to 1000 [ 1858.323853][T30016] Bluetooth: hci6: command tx timeout [ 1858.653604][T30300] chnl_net:caif_netlink_parms(): no params data found [ 1858.857322][T30300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.857565][T30300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.857801][T30300] bridge_slave_0: entered allmulticast mode [ 1858.861025][T30300] bridge_slave_0: entered promiscuous mode [ 1858.893050][T30300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.893277][T30300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.893600][T30300] bridge_slave_1: entered allmulticast mode [ 1858.896732][T30300] bridge_slave_1: entered promiscuous mode [ 1859.066738][T30300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1859.083238][T30300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1859.187330][T30300] team0: Port device team_slave_0 added [ 1859.198672][T30300] team0: Port device team_slave_1 added [ 1859.259385][T30300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1859.259414][T30300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1859.259448][T30300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1859.261984][T30300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1859.262001][T30300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1859.262033][T30300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1859.433014][T30300] hsr_slave_0: entered promiscuous mode [ 1859.434590][T30300] hsr_slave_1: entered promiscuous mode [ 1859.435766][T30300] debugfs: 'hsr0' already exists in 'hsr' [ 1859.435795][T30300] Cannot create hsr debugfs directory [ 1860.651842][T30016] Bluetooth: hci6: command tx timeout [ 1861.380196][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1861.380275][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.673943][T19532] hsr_slave_0: left promiscuous mode [ 1861.717296][T19532] hsr_slave_1: left promiscuous mode [ 1861.718523][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.780306][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.920682][T19532] hsr_slave_0: left promiscuous mode [ 1861.955716][T19532] hsr_slave_1: left promiscuous mode [ 1861.956886][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.989775][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1862.130184][T19532] hsr_slave_0: left promiscuous mode [ 1862.184412][T19532] hsr_slave_1: left promiscuous mode [ 1862.186498][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1862.208588][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1862.345589][T19532] hsr_slave_0: left promiscuous mode [ 1862.365856][T19532] hsr_slave_1: left promiscuous mode [ 1862.374532][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1862.403396][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1862.832317][T27659] Bluetooth: hci6: command tx timeout [ 1862.997565][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1863.062607][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1863.895944][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1863.994071][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1864.830952][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1864.904671][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1865.730373][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1865.816372][T19532] team0 (unregistering): Port device team_slave_0 removed [ 1868.930973][T30023] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1869.097955][T30023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1869.143427][T30023] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1869.354705][T30023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1869.372283][T30023] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1869.521349][T30023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1869.785611][T30023] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1869.863943][T30023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1870.736892][T30013] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1870.912325][T30013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1870.965228][T30013] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1871.089269][T30013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1872.358149][T30016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1872.444126][T30016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1872.453567][T30016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1872.480785][T30016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1872.486393][T30016] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1873.088300][T27659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1873.193481][T27659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1873.290888][T27659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1873.319330][T27659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1873.320220][T27659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1874.884041][T30016] Bluetooth: hci0: command tx timeout [ 1875.681471][T30016] Bluetooth: hci2: command tx timeout [ 1875.951335][T30317]  speed is unknown, defaulting to 1000 [ 1876.763674][T30320]  speed is unknown, defaulting to 1000 [ 1877.138451][T30016] Bluetooth: hci0: command tx timeout [ 1877.568639][T30320] chnl_net:caif_netlink_parms(): no params data found [ 1877.769403][T30317] chnl_net:caif_netlink_parms(): no params data found [ 1877.919026][T30016] Bluetooth: hci2: command tx timeout [ 1878.191212][T30320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.191348][T30320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.191621][T30320] bridge_slave_0: entered allmulticast mode [ 1878.194765][T30320] bridge_slave_0: entered promiscuous mode [ 1878.199143][T30320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.199287][T30320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.199539][T30320] bridge_slave_1: entered allmulticast mode [ 1878.203694][T30320] bridge_slave_1: entered promiscuous mode [ 1878.415881][T30320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1878.416323][T30317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.433844][T30317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.434197][T30317] bridge_slave_0: entered allmulticast mode [ 1878.455003][T30317] bridge_slave_0: entered promiscuous mode [ 1878.468064][T30320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1878.513663][T30317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.513887][T30317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.514109][T30317] bridge_slave_1: entered allmulticast mode [ 1878.567275][T30317] bridge_slave_1: entered promiscuous mode [ 1878.655573][T30320] team0: Port device team_slave_0 added [ 1878.689329][T30320] team0: Port device team_slave_1 added [ 1878.718409][T30317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1878.800723][T30317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1878.877602][T30320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.877623][T30320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.877655][T30320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.953747][T30320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.953768][T30320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.953800][T30320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.958126][T30317] team0: Port device team_slave_0 added [ 1879.066401][T30317] team0: Port device team_slave_1 added [ 1879.413378][T27659] Bluetooth: hci0: command tx timeout [ 1879.899475][T30317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1879.899497][T30317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1879.899529][T30317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1879.981021][T30317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1879.981043][T30317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1879.981077][T30317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1880.054845][T30320] hsr_slave_0: entered promiscuous mode [ 1880.056398][T30320] hsr_slave_1: entered promiscuous mode [ 1880.057637][T30320] debugfs: 'hsr0' already exists in 'hsr' [ 1880.057673][T30320] Cannot create hsr debugfs directory [ 1880.172988][T27659] Bluetooth: hci2: command tx timeout [ 1880.334079][T30317] hsr_slave_0: entered promiscuous mode [ 1880.343786][T30317] hsr_slave_1: entered promiscuous mode [ 1880.345108][T30317] debugfs: 'hsr0' already exists in 'hsr' [ 1880.345146][T30317] Cannot create hsr debugfs directory [ 1881.649460][T27659] Bluetooth: hci0: command tx timeout [ 1882.035457][T30209] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1882.124640][T30209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1882.162817][T30209] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1882.216163][T30209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1882.429386][T27659] Bluetooth: hci2: command tx timeout [ 1882.730630][T30209] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1882.739077][T30209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1882.768270][T30209] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1882.933058][T30209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1883.572148][T30209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1883.650531][T30209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.676275][T19539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.676512][T19539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1883.789938][T19549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.790805][T19549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1884.473537][T30209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1885.491963][T30209] veth0_vlan: entered promiscuous mode [ 1885.511401][T30209] veth1_vlan: entered promiscuous mode [ 1885.609799][T30209] veth0_macvtap: entered promiscuous mode [ 1885.622987][T30209] veth1_macvtap: entered promiscuous mode [ 1885.694592][T30209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1885.715410][T30209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1885.752154][T19562] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.752212][T19562] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.752255][T19562] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.752297][T19562] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.188475][T27828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1888.188507][T27828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1888.492534][T19549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1888.492560][T19549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1910.202431][T30416] openvswitch: netlink: Missing valid actions attribute. [ 1910.202697][T30416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1916.097073][ T5464] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1922.231403][T30016] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1922.890208][T30016] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1922.892392][T30016] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1922.921793][T30016] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1922.922741][T30016] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1924.828140][T30500] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1924.828175][T30500] overlayfs: failed to set xattr on upper [ 1924.828186][T30500] overlayfs: ...falling back to redirect_dir=nofollow. [ 1924.828197][T30500] overlayfs: ...falling back to index=off. [ 1924.828207][T30500] overlayfs: ...falling back to uuid=null. [ 1924.939643][T30501] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1925.519747][T27659] Bluetooth: hci3: command tx timeout [ 1927.772134][T27659] Bluetooth: hci3: command tx timeout [ 1927.870337][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1927.870416][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1930.026631][T27659] Bluetooth: hci3: command tx timeout [ 1930.153558][T19532] bridge_slave_1: left allmulticast mode [ 1930.153595][T19532] bridge_slave_1: left promiscuous mode [ 1930.153908][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.435409][T19532] bridge_slave_0: left allmulticast mode [ 1930.435442][T19532] bridge_slave_0: left promiscuous mode [ 1930.435850][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.280785][T27659] Bluetooth: hci3: command tx timeout [ 1933.086844][T19532] bridge_slave_1: left allmulticast mode [ 1933.086880][T19532] bridge_slave_1: left promiscuous mode [ 1933.087144][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.337661][T19532] bridge_slave_0: left allmulticast mode [ 1933.337696][T19532] bridge_slave_0: left promiscuous mode [ 1933.337954][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.715310][T19532] bridge_slave_1: left allmulticast mode [ 1936.715345][T19532] bridge_slave_1: left promiscuous mode [ 1936.715628][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.044375][T19532] bridge_slave_0: left allmulticast mode [ 1937.044412][T19532] bridge_slave_0: left promiscuous mode [ 1937.044670][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.398151][T19532] bridge_slave_1: left allmulticast mode [ 1937.398204][T19532] bridge_slave_1: left promiscuous mode [ 1937.699087][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.153811][T19532] bridge_slave_0: left allmulticast mode [ 1938.153846][T19532] bridge_slave_0: left promiscuous mode [ 1938.154143][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.226376][T30016] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1939.381272][T30016] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1939.471414][T30016] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1939.593348][T30016] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1939.655204][T30016] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1941.867241][T30016] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1941.980098][T30016] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1941.985771][T30016] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1942.016678][T30016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1942.020807][T30016] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1944.125346][T30016] Bluetooth: hci5: command tx timeout [ 1944.333182][T30016] Bluetooth: hci7: command tx timeout [ 1945.837713][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1945.907910][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1946.064982][T19532] bond0 (unregistering): Released all slaves [ 1946.327157][T30016] Bluetooth: hci5: command tx timeout [ 1946.695002][T30016] Bluetooth: hci7: command tx timeout [ 1947.617527][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1948.581283][T30016] Bluetooth: hci5: command tx timeout [ 1948.927403][T30016] Bluetooth: hci7: command tx timeout [ 1948.962256][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1949.434298][T19532] bond0 (unregistering): Released all slaves [ 1950.835459][T30016] Bluetooth: hci5: command tx timeout [ 1951.181547][T30016] Bluetooth: hci7: command tx timeout [ 1952.436782][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1955.696191][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.046732][T19532] bond0 (unregistering): Released all slaves [ 1956.966434][T27659] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1957.050802][T27659] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1957.107537][T27659] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1957.126584][T27659] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1957.128043][T27659] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1958.304000][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1958.370210][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1958.424845][T19532] bond0 (unregistering): Released all slaves [ 1958.700338][ T5464] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1959.559536][T30016] Bluetooth: hci8: command tx timeout [ 1961.847303][T30016] Bluetooth: hci8: command tx timeout [ 1964.102092][T30016] Bluetooth: hci8: command tx timeout [ 1966.898657][T30016] Bluetooth: hci8: command tx timeout [ 1969.765946][T30485]  speed is unknown, defaulting to 1000 [ 1969.777278][T30572]  speed is unknown, defaulting to 1000 [ 1969.852604][T30533]  speed is unknown, defaulting to 1000 [ 1970.015985][T30526]  speed is unknown, defaulting to 1000 [ 1970.348626][T23227] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1970.574320][T23227] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1970.575258][T23227] usb 10-1: not running at top speed; connect to a high speed hub [ 1970.576908][T23227] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 1970.576943][T23227] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1970.576985][T23227] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1970.580272][T23227] usb 10-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1970.580304][T23227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.580328][T23227] usb 10-1: Product: syz [ 1970.580345][T23227] usb 10-1: Manufacturer: syz [ 1970.580363][T23227] usb 10-1: SerialNumber: syz [ 1971.788813][T30601] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8871'. [ 1976.179716][T23227] usb 10-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1976.767517][T27800] usb 10-1: USB disconnect, device number 2 [ 1980.066669][T30016] Bluetooth: hci4: command 0x0406 tx timeout [ 1980.572754][T19532] hsr_slave_0: left promiscuous mode [ 1980.650507][T19532] hsr_slave_1: left promiscuous mode [ 1980.651743][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.070222][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.666416][T19532] hsr_slave_0: left promiscuous mode [ 1983.389402][T19532] hsr_slave_1: left promiscuous mode [ 1983.390586][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1984.212312][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1986.789922][T30622] loop7: detected capacity change from 0 to 7 [ 1986.868881][ C1] blk_print_req_error: 10 callbacks suppressed [ 1986.868906][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1986.868937][ C1] buffer_io_error: 10 callbacks suppressed [ 1986.868950][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1986.921126][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1986.921174][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1987.184395][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1987.184591][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1987.340307][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1987.340443][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1988.122770][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1988.122812][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1988.156515][T19532] hsr_slave_0: left promiscuous mode [ 1988.201009][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1988.201048][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1988.289590][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1988.289635][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1988.319695][T30622] ldm_validate_partition_table(): Disk read failed. [ 1988.352078][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1988.352120][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1988.425697][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1988.425738][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1988.428114][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1988.428148][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1988.430166][T30622] Dev loop7: unable to read RDB block 0 [ 1988.568701][T19532] hsr_slave_1: left promiscuous mode [ 1988.601662][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1988.642166][T30016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1988.730931][T30016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1988.823080][T30016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1988.987214][T22706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1989.001263][T22706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1989.019179][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1989.478503][T30622] loop7: unable to read partition table [ 1989.689260][T30622] loop7: partition table beyond EOD, truncated [ 1989.695153][T30622] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1990.447619][T19532] hsr_slave_0: left promiscuous mode [ 1990.658824][T19532] hsr_slave_1: left promiscuous mode [ 1990.659973][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1990.933870][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1991.156190][T30629] Bluetooth: hci6: command 0x0406 tx timeout [ 1991.325050][T30629] Bluetooth: hci0: command tx timeout [ 1993.586043][T30629] Bluetooth: hci0: command tx timeout [ 1994.462458][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1994.462540][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1995.842663][ T5821] Bluetooth: hci0: command tx timeout [ 1997.205018][T19532] team0 (unregistering): Port device team_slave_1 removed [ 1998.351349][ T5821] Bluetooth: hci0: command tx timeout [ 1998.463295][T19532] team0 (unregistering): Port device team_slave_0 removed [ 2003.292926][T19532] team0 (unregistering): Port device team_slave_1 removed [ 2003.324962][T19532] team0 (unregistering): Port device team_slave_0 removed [ 2004.734088][T19532] team0 (unregistering): Port device team_slave_1 removed [ 2004.799980][T19532] team0 (unregistering): Port device team_slave_0 removed [ 2005.388520][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2005.453355][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2005.455581][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2005.481644][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2005.484293][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2006.308529][T27659] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2006.383856][T27659] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2006.397272][T27659] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2006.481489][T27659] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2006.482502][T27659] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2007.715401][T19532] team0 (unregistering): Port device team_slave_1 removed [ 2007.750589][T19532] team0 (unregistering): Port device team_slave_0 removed [ 2008.027928][T22706] Bluetooth: hci1: command tx timeout [ 2008.059159][T22706] Bluetooth: hci2: command 0x0406 tx timeout [ 2009.836254][T30629] Bluetooth: hci9: command tx timeout [ 2010.232659][T30629] Bluetooth: hci1: command tx timeout [ 2012.213223][T30629] Bluetooth: hci9: command tx timeout [ 2012.480143][T30629] Bluetooth: hci1: command tx timeout [ 2014.084011][T23228] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 2014.250930][T23228] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2014.251834][T23228] usb 10-1: not running at top speed; connect to a high speed hub [ 2014.253679][T23228] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2014.253706][T23228] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2014.293469][T23228] usb 10-1: New USB device found, idVendor=1235, idProduct=8207, bcdDevice= 0.40 [ 2014.293502][T23228] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 2014.293526][T23228] usb 10-1: Product: syz [ 2014.293542][T23228] usb 10-1: Manufacturer: syz [ 2014.293560][T23228] usb 10-1: SerialNumber: syz [ 2014.387343][T30629] Bluetooth: hci9: command tx timeout [ 2014.840941][T30629] Bluetooth: hci1: command tx timeout [ 2016.651976][T22706] Bluetooth: hci9: command tx timeout [ 2022.446957][T22706] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2022.512521][T22706] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2022.535156][T22706] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2022.550897][T22706] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2022.581486][T22706] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2030.481140][T27659] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2030.560122][T27659] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2030.564611][T27659] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2030.565983][T27659] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2030.610689][T27659] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2050.629403][ T38] INFO: task syz-executor:30320 blocked for more than 143 seconds. [ 2050.629436][ T38] Tainted: G L syzkaller #0 [ 2050.629450][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2050.629462][ T38] task:syz-executor state:D stack:22376 pid:30320 tgid:30320 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2050.629532][ T38] Call Trace: [ 2050.629541][ T38] [ 2050.629558][ T38] __schedule+0x1681/0x54c0 [ 2050.629593][ T38] ? unwind_next_frame+0xa6/0x2550 [ 2050.629657][ T38] ? __pfx___schedule+0x10/0x10 [ 2050.629703][ T38] rt_mutex_schedule+0x76/0xf0 [ 2050.629739][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 2050.629800][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 2050.629828][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 2050.629855][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2050.629904][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2050.629940][ T38] ? new_device_store+0x13c/0x710 [ 2050.629969][ T38] mutex_lock_nested+0x168/0x1d0 [ 2050.630008][ T38] ? new_device_store+0x13c/0x710 [ 2050.630041][ T38] new_device_store+0x13c/0x710 [ 2050.630075][ T38] ? __pfx_new_device_store+0x10/0x10 [ 2050.630103][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 2050.630142][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 2050.630171][ T38] ? sysfs_kf_write+0x166/0x260 [ 2050.630203][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2050.630230][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 2050.630263][ T38] vfs_write+0x629/0xba0 [ 2050.630310][ T38] ? __pfx_vfs_write+0x10/0x10 [ 2050.630350][ T38] ? do_sys_openat2+0x14c/0x200 [ 2050.630378][ T38] ? kmem_cache_free+0x187/0x6c0 [ 2050.630422][ T38] ksys_write+0x156/0x270 [ 2050.630461][ T38] ? __pfx_ksys_write+0x10/0x10 [ 2050.630508][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2050.630536][ T38] do_syscall_64+0x15f/0xf80 [ 2050.630569][ T38] ? clear_bhb_loop+0x40/0x90 [ 2050.630600][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2050.630625][ T38] RIP: 0033:0x7f09a7c6d04e [ 2050.630665][ T38] RSP: 002b:00007ffd1553f8f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2050.630690][ T38] RAX: ffffffffffffffda RBX: 000055558c71c500 RCX: 00007f09a7c6d04e [ 2050.630708][ T38] RDX: 0000000000000003 RSI: 00007ffd1553f980 RDI: 0000000000000005 [ 2050.630723][ T38] RBP: 00007f09a7d43538 R08: 0000000000000000 R09: 0000000000000000 [ 2050.630739][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2050.630753][ T38] R13: 00007ffd1553f980 R14: 00007f09a8a54620 R15: 0000000000000003 [ 2050.630818][ T38] [ 2050.630864][ T38] [ 2050.630864][ T38] Showing all locks held in the system: [ 2050.630876][ T38] 5 locks held by ktimers/0/16: [ 2050.630892][ T38] 1 lock held by khungtaskd/38: [ 2050.630905][ T38] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2050.630968][ T38] 3 locks held by kworker/u8:2/39: [ 2050.630982][ T38] #0: ffff888031c99938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2050.631052][ T38] #1: ffffc90000b07c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2050.631130][ T38] #2: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 2050.631208][ T38] 2 locks held by kworker/1:3/1242: [ 2050.631223][ T38] #0: ffff88801a04b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2050.631293][ T38] #1: ffffc900057afc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2050.631377][ T38] 2 locks held by dhcpcd/5464: [ 2050.631391][ T38] #0: ffff88808b512928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 2050.631460][ T38] #1: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 2050.631526][ T38] 2 locks held by getty/5560: [ 2050.631540][ T38] #0: ffff88803715d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2050.631603][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 2050.631664][ T38] 4 locks held by kworker/u8:31/19532: [ 2050.631678][ T38] #0: ffff88801b2a8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2050.631747][ T38] #1: ffffc90006f37c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2050.631816][ T38] #2: ffffffff8f359180 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 2050.631885][ T38] #3: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 2050.631946][ T38] 4 locks held by kworker/u9:0/22706: [ 2050.631960][ T38] #0: ffff88803ad0d138 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2050.632035][ T38] #1: ffffc90004d9fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2050.632105][ T38] #2: ffff88805794c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 2050.632177][ T38] #3: ffffffff8f4f2df8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 2050.632246][ T38] 2 locks held by kworker/0:2/26431: [ 2050.632260][ T38] #0: ffff88801a04b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2050.632329][ T38] #1: ffffc9000a1dfc40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2050.632400][ T38] 3 locks held by kworker/u8:4/27410: [ 2050.632414][ T38] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2050.632483][ T38] #1: ffffc9001127fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2050.632553][ T38] #2: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2050.632611][ T38] 4 locks held by kworker/u9:1/27659: [ 2050.632626][ T38] #0: ffff8880401c6938 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2050.632699][ T38] #1: ffffc90010667c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2050.632768][ T38] #2: ffff8880372a80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 2050.632833][ T38] #3: ffffffff8f4f2df8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 2050.632904][ T38] 7 locks held by syz-executor/30300: [ 2050.632918][ T38] #0: ffff888037562480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 2050.632988][ T38] #1: ffff8880608c6078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2050.633044][ T38] #2: ffff888026d2ec38 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2050.633105][ T38] #3: ffffffff8ebcf1f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 2050.633175][ T38] #4: ffff88803c76d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2050.633237][ T38] #5: ffff888024e06310 (&devlink->lock_key#26){+.+.}-{4:4}, at: nsim_drv_probe+0xc9/0xc30 [ 2050.633310][ T38] #6: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 2050.633380][ T38] 1 lock held by syz-executor/30317: [ 2050.633400][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 2050.633458][ T38] 4 locks held by syz-executor/30320: [ 2050.633472][ T38] #0: ffff888037562480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 2050.633544][ T38] #1: ffff888038db9478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2050.633599][ T38] #2: ffff888026d2ec38 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 2050.633661][ T38] #3: ffffffff8ebcf1f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 2050.633724][ T38] 3 locks held by syz-executor/30485: [ 2050.633738][ T38] #0: ffff88808a3dcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 2050.633804][ T38] #1: ffff88808a3dc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 2050.633862][ T38] #2: ffffffff8f4f2df8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 2050.633924][ T38] 4 locks held by syz-executor/30526: [ 2050.633938][ T38] #0: ffff8880339dcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 2050.634004][ T38] #1: ffff8880339dc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 2050.634061][ T38] #2: ffffffff8f4f2df8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 2050.634128][ T38] #3: ffff888040d58370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 2050.634194][ T38] 3 locks held by syz-executor/30533: [ 2050.634208][ T38] #0: ffff8880545b8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 2050.634274][ T38] #1: ffff8880545b80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 2050.634331][ T38] #2: ffffffff8f4f2df8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 2050.634393][ T38] 2 locks held by syz-executor/30572: [ 2050.634407][ T38] #0: ffffffff8f8bb840 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2050.634482][ T38] #1: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 2050.634549][ T38] 1 lock held by syz-executor/30626: [ 2050.634563][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2050.634631][ T38] 1 lock held by syz-executor/30640: [ 2050.634645][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2050.634712][ T38] 1 lock held by syz-executor/30646: [ 2050.634726][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2050.634794][ T38] 3 locks held by syz.9.8880/30662: [ 2050.634808][ T38] #0: ffffffff8f3d7680 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2050.634866][ T38] #1: ffffffff8f3d7498 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 2050.634926][ T38] #2: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: wg_set_device_doit+0x170/0x2070 [ 2050.634984][ T38] 1 lock held by syz-executor/30664: [ 2050.634998][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2050.635067][ T38] 1 lock held by syz-executor/30667: [ 2050.635081][ T38] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2050.635154][ T38] [ 2050.635160][ T38] ============================================= [ 2050.635160][ T38] [ 2050.635178][ T38] NMI backtrace for cpu 1 [ 2050.635201][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2050.635261][ T38] Tainted: [L]=SOFTLOCKUP [ 2050.635277][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2050.635304][ T38] Call Trace: [ 2050.635321][ T38] [ 2050.635339][ T38] dump_stack_lvl+0xe8/0x150 [ 2050.635387][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2050.635425][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2050.635465][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2050.635507][ T38] sys_info+0x135/0x170 [ 2050.635541][ T38] watchdog+0xfd3/0x1030 [ 2050.635574][ T38] ? watchdog+0x1c9/0x1030 [ 2050.635603][ T38] kthread+0x388/0x470 [ 2050.635632][ T38] ? __pfx_watchdog+0x10/0x10 [ 2050.635653][ T38] ? __pfx_kthread+0x10/0x10 [ 2050.635684][ T38] ret_from_fork+0x514/0xb70 [ 2050.635725][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2050.635763][ T38] ? __switch_to+0xc79/0x1410 [ 2050.635799][ T38] ? __pfx_kthread+0x10/0x10 [ 2050.635829][ T38] ret_from_fork_asm+0x1a/0x30 [ 2050.635873][ T38] [ 2050.635882][ T38] Sending NMI from CPU 1 to CPUs 0: [ 2050.635916][ C0] NMI backtrace for cpu 0 [ 2050.635937][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2050.635979][ C0] Tainted: [L]=SOFTLOCKUP [ 2050.635991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2050.636009][ C0] RIP: 0010:__lock_acquire+0xa54/0x2cf0 [ 2050.636038][ C0] Code: c7 c6 5a 47 74 8d 67 48 0f b9 3a 90 31 c0 48 83 78 40 00 0f 84 5f 1d 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 3c ba d8 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 30 33 1a 93 eb 32 83 3d 43 4a [ 2050.636054][ C0] RSP: 0018:ffffc90000157900 EFLAGS: 00000003 [ 2050.636070][ C0] RAX: 000000000000000b RBX: 00000000743e9dab RCX: 000000009b2ea6c3 [ 2050.636083][ C0] RDX: 000000000a51b2e4 RSI: 000000004fc3cdc2 RDI: ffff88801cef8000 [ 2050.636097][ C0] RBP: c77151bc00000000 R08: ffffffff89356781 R09: ffffffff8dfc80c0 [ 2050.636112][ C0] R10: dffffc0000000000 R11: fffffbfff1f1717f R12: ffff88801cef8c98 [ 2050.636127][ C0] R13: ffff88801cef8c98 R14: ffff88801cef8000 R15: 0000000000000004 [ 2050.636141][ C0] FS: 0000000000000000(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 2050.636157][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2050.636170][ C0] CR2: 0000001b34e18ff8 CR3: 00000000b08b8000 CR4: 00000000003526f0 [ 2050.636187][ C0] Call Trace: [ 2050.636194][ C0] [ 2050.636208][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2050.636233][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 2050.636257][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2050.636281][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 2050.636301][ C0] ? advance_sched+0xa01/0xc90 [ 2050.636319][ C0] lock_acquire+0x106/0x350 [ 2050.636339][ C0] ? advance_sched+0xa01/0xc90 [ 2050.636366][ C0] ? rt_spin_unlock+0x14f/0x200 [ 2050.636386][ C0] ? advance_sched+0xa01/0xc90 [ 2050.636406][ C0] advance_sched+0xa1d/0xc90 [ 2050.636424][ C0] ? advance_sched+0xa01/0xc90 [ 2050.636449][ C0] ? __pfx_advance_sched+0x10/0x10 [ 2050.636469][ C0] __hrtimer_run_queues+0x405/0xb10 [ 2050.636505][ C0] hrtimer_run_softirq+0x18f/0x260 [ 2050.636536][ C0] handle_softirqs+0x1de/0x6d0 [ 2050.636569][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 2050.636588][ C0] run_ktimerd+0x69/0x100 [ 2050.636606][ C0] smpboot_thread_fn+0x541/0xa50 [ 2050.636626][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 2050.636650][ C0] kthread+0x388/0x470 [ 2050.636670][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2050.636689][ C0] ? __pfx_kthread+0x10/0x10 [ 2050.636710][ C0] ret_from_fork+0x514/0xb70 [ 2050.636740][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2050.636768][ C0] ? __switch_to+0xc79/0x1410 [ 2050.636794][ C0] ? __pfx_kthread+0x10/0x10 [ 2050.636815][ C0] ret_from_fork_asm+0x1a/0x30 [ 2050.636843][ C0] [ 2050.636920][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2050.636940][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2050.636972][ T38] Tainted: [L]=SOFTLOCKUP [ 2050.636981][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2050.636996][ T38] Call Trace: [ 2050.637006][ T38] [ 2050.637017][ T38] vpanic+0x56c/0xa60 [ 2050.637045][ T38] ? __pfx_vpanic+0x10/0x10 [ 2050.637081][ T38] panic+0xc5/0xd0 [ 2050.637105][ T38] ? __pfx_panic+0x10/0x10 [ 2050.637148][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 2050.637192][ T38] watchdog+0x102c/0x1030 [ 2050.637223][ T38] ? watchdog+0x1c9/0x1030 [ 2050.637254][ T38] kthread+0x388/0x470 [ 2050.637283][ T38] ? __pfx_watchdog+0x10/0x10 [ 2050.637305][ T38] ? __pfx_kthread+0x10/0x10 [ 2050.637336][ T38] ret_from_fork+0x514/0xb70 [ 2050.637376][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2050.637415][ T38] ? __switch_to+0xc79/0x1410 [ 2050.637450][ T38] ? __pfx_kthread+0x10/0x10 [ 2050.637481][ T38] ret_from_fork_asm+0x1a/0x30 [ 2050.637526][ T38] [ 2050.638122][ T38] Kernel Offset: disabled