last executing test programs: 21m12.71944004s ago: executing program 1 (id=150): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @desc4}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x19a) r1 = openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 21m9.262470552s ago: executing program 1 (id=157): socket$kcm(0x29, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x35a53000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r0, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a000a000000000000000000080008000e00000000ff", 0x24) 21m7.228757678s ago: executing program 1 (id=162): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') write$cgroup_devices(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="e50c666c6c0000000000000000000000000000000000000000b1a37724b7f1a6077be73154550bfff04315700980ab86cd0809c4c6db38313b312cf78add2f9ac1b03610a26ee556819ef465de52173397b22ebded203efea631c22553eb9bee052367fccd8adc114fc0e7b35f4e2cd072711a38c2fa0b024bae4b5250f3d8fb2a9b0000ddbfa36e5e34057b955062509cf5e37ba9bf678d6810844e2600a8f6bc33443d6669d4e60d5b9df0d06207fad0967b3caa0930", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x225d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r7, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000001240)="9ed76f2266", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_open_dev$amidi(&(0x7f0000000080), 0x1, 0x40102) ppoll(&(0x7f00000000c0)=[{r7, 0x201}, {r8}, {r1, 0x20}, {r1, 0x1420}, {r0, 0x8822}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0xc7f2]}, 0x8) 21m5.246707822s ago: executing program 1 (id=167): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') write$cgroup_devices(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="e50c666c6c0000000000000000000000000000000000000000b1a37724b7f1a6077be73154550bfff04315700980ab86cd0809c4c6db38313b312cf78add2f9ac1b03610a26ee556819ef465de52173397b22ebded203efea631c22553eb9bee052367fccd8adc114fc0e7b35f4e2cd072711a38c2fa0b024bae4b5250f3d8fb2a9b0000ddbfa36e5e34057b955062509cf5e37ba9bf678d6810844e2600a8f6bc33443d6669d4e60d5b9df0d06207fad0967b3caa0930", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x225d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r7, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000001240)="9ed76f2266", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_open_dev$amidi(&(0x7f0000000080), 0x1, 0x40102) ppoll(&(0x7f00000000c0)=[{r7, 0x201}, {r8}, {r1, 0x20}, {r1, 0x1420}, {r0, 0x8822}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0xc7f2]}, 0x8) 21m3.93168673s ago: executing program 1 (id=169): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000552a5920240401c05faa0102030109021b0001000010000904"], 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb09e3c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x5, 0x5, 0x0, {0x5, 0x0, 0x48b, 0x7, 0x400000000000027, 0xd, 0xfff7ffff, 0x6, 0x4101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002180)="367a56f763423d321c140b07a5ebabcf65cbc0a615593475b1f6df463a6a3375e0f55e93412b807558c74f2c4f28d1ec3b184490c21684b68863fea3517f7a07c46418ea0f95e771de99ea028020cd09b3848e81000b84c63428f38f75d6ef23a775bd3a1cd729d459e92c44f6e10eff0c2cee3bc97c5c2fb84db661516c9fe79de378f546b6a4302b96c5362b79c93ff903508601a0a93b07e7bb42623fdfba5770c0a745c84d47785c8e6b8441aef90ff18843e7b3a06ebb829c0a7166bf43e971edbe34bb562baf5ee4e327e321b20a60570b99ce59bb22ff02f30d77d3998647c0d88f724d26bc9b6341a43bfa2f5749b63c28f21ac254c9fcb2fe9ebea515799594a98f505734ea97ed24903d9bccdd08e48e79b9cb98e1feba2d06518d06e8393fb9db6ae50e5634deffd4247c6f9fa055c700a6408cdf18dbc525c65f77c9b09af2ad19ada02ba874b59a5df468b119a1901c2c874229857f21290ca0eb5215197f808a00f3be9fd0d70ce5dbb0f5add9ea78ba97448ea46396496071d23ed9156d92cd4021e81ced0b69d05cd7c763e101e38d704a0caae62ec6b1d44537d81b0325044470403df64f554e61a317f00e34dd78012212d564bcc1394c4e37eff1bbe6254bed6e649ccf1154e1e02cd6f630bbea0dec49c3f6789e3c93c7709b8b10a4626fa296574ac64a7a750fa58ce928627f59bed52779dc6caf102f65aac4007548892412adf8773dc7a788eacff3f914ebcedf9ad2d9dc3e0d8a7d8e500b085f7df2e8c64efdeaa785289c6af1e8a5b02423bc83e49d79f754838dc88fe525bd95e66e67c80fa64a4a3c8c2b137482d40ed34cf55fa47a99bd946ebea97ce4cd4e489b4e302b6acdf8716bacf82a73b4f53cf7d205da3b0a81c5d00f88ef056aed125f94baf48c67359c8916ce9c2cf24856a4208c6e6c867095c0f0b27377e8556b09350e2b06fbcf6558d3b8d92788ec386d64cfb2cd3f79f5d661510de65db2d1ea4e56cc45cbc146793c73b96e1816de99a3cfb6086ef8f2c559221dacd5ec15a4b280ef6f42de359718f79d2cb9e069575dd8b989a504d2e5d04cd1b276aaf7b54c41acba8b65bf02b7a89277a1e3030cc01d1f5f3780b01875a904ae50409b2dc37ef9bdfdf017ebd499ead9611ba0f2eaba5c74be400c705c42815bf2d7e0be1fc488d87327accd4405b7d83f7feaaf6b19c7ae64f05fb521bfbc04d22c42bde3e38335b8358a7276a337f69d99e7299a085e31bb5afe5aa5ecb105de9904922bb104ae5f86f165716550efabab79f27770801952c7ad663ab0c149459fe8814c944209ca7ad946d991438fa36f98948eb53054129cbbb76eec3859b188dff70c34a6beb21b29eb843a3c85a0f5f75f8fb2ec15a63c94845352e14b3b5837c6b690db1fd9cad0ba283b24003a4537214e98afb52116236c7034fbc330fe50a99554280fd706a8ead6de81af2a77cc098bb0fd6ef4d7b4f6f1a964789decd072705cec30b31861ddee6bd9c0985d2de4f1baf698f991b8888660aa8e3bd1bd37493581a6ef3350b1fc466be3da4c95b5e699a1f5888457117808062d21c9a3fd5d649004750c784a8514b9d1f0a10cdd8fbdbfc14243b218c282ab97739081ae7897f305b7e4f7694b8e92612a01558777c92afc03e314b9f4568a0d85921ae1ba8716cb638e54d879ae33965718ecdde1f00fdbc65ee998f0567510ddeb0be6c5b920fd4c840768b09860ec4fed7fb2fce670b14078eb38737340a773b2548c19833e544b42c6aa52ef7ed39392fc575224fd61906e8ac06d9bb20d56a54f6d2f799fab85876ff625495b84af696bb47947216788cddc093ce3c4df62fc621b6057f5c92f3a51f06aaa177c8f7b86744226655b29a6debbff0b18afadae01df65e02a38762e28d17f248c646ea5291a0f03be26abc11920fdcef8e18dd202e1f692542c5b47860fba0a80a71025d5641b7cc3c7852624edf38ac309118bcecf5b887abcb25a2e86b2ac5c0cb214826c69d40bb145c45554accde985390ac0754c00a29e23afb058beac2fca8d704286fa81357bbbc344759736b305c29ad5d0c06525c71151d1603b284c12a9c515a5ee23ebdc584bdead54619e3f855380ab630095cf3731dd5c9dc363ec52eca4ccfc9a9c911cf8a9005b1438c4737c1448ec942dc7dc69b56451b02b557def3ade225fcdb247413edde35da30c0c8f6078e91f06d382b2b86044786965d4595bf1cd4d6d9b06c3bfa4434bf553d4c6423c051e463f26f96006f6240c52f4e4cf4f7814964b4f999b99057be7bd62bf4ebe6e3813962c53acefff7f7e23585adc8d92f40048040f3e78b81e831e94e19746c108ad76e0e6041359cd4b5c663e70c08a5220734e6be2b5e75c3b98de6f4bcca1ea7bfbe59675519b17b0c3d1cec0a60eedf62a237ac12861c4d95094316d9fea8b86ab87330dca8a5007a3a7cf77658d8027680ac36a94e2e6bfc0a22a738d3ce228a3c050b42a3be6c3c940dadaf8758efd98b34bead2b328d1e97e6dcd5f531365ff2070d123ae8faa90dd5f59f539fb70f426c502a6bac7c0094188d60098425d19364fa9ee764449f2fa8c425d5f5ad1464c6eeb2cd4841fdc1728e675740ca1b9decc6e1194c21e89e5d01d95600280d6aeb1b9cda2a93163f84451ffc917c01cd2be90c0e260ff9726ce73c70690a09c63095ce8d3c45ee01fba753ce587be30835500a823d09a129a1a56da6d2663d61cbea1041f727cf80a671dd5a1b48b97a2773c62d973c0aa3d088a5bcf601026bcfeb7732093f93e96d3b0b739621a5171aa897c33e16cea756a95891cad530bd2ac2101554e59192e769ed3ed073dd9c2384a1c413ff371d42596dc6248936e6715a461f7246bfcd3015027f8172d204863a4a97ee3f35f59c0f3c8e1898f20c365e6685961956d2ab3301a5a5fc28245f7253dce06d96ace562dc524831eb66515fcfe501583ce467b38a65df529097729cb89f0377072c9bcf5e20f109dbdb287ccca25cc879105f9190a2a8ec95c4064150b7dcdffae533322745f97ca075d119c731d866d0c2787475de70d63234e1c6aa1613d29323a7bab42895323c4f442fa44f319236fd9dc565bf8b3658ad07dc598282cc571dddab796ea3700da303d1041ddc13023698cc7f993e3f63d7969eeb6f29eb75298726142ac39ab1f61af23429bb7ff00cc0db15691c92434f1d6c07acfa1abc0579e3629260e7b8b44a4ee31787cd7d2e120f138c6dd437905dc673f79a8e83dcb94a75e15ee41519b0a8c056e58348790c75fdd5467341753d12f71b961053c3ca218be9b81c7cd45af8b08248dc77c9542e46aa74d27de06194037e414dec4a92073ae355b8edc5462fb7fb1c220eedf971b48f67410bd2e83aa7b59d05d64f15fef52059b82ef22420ad0d23ed640362934bab6bdb00156070012b76678689969e4a7b7b854af923a493f258019405b20f1204f2b0d029063548e0611a2093ff771b65d7989133b8a4a67415990bdb62fd981aeaa54d299c0fdf3a1dd5957f1dd53ce89347f5a47d551c17a507fd70c0eae47ca6a6a2f756157461236c9991a22e71e7df5a040f393dae0ed4c9ab5287573d7ddb1a51d038007c8a5392615da6b7bc198d7030078bc5087d372e77f117b4be0c13040b3fb2586c0e6da43aaf226507b8aa77207c375d285bf137b33b2db7506c5d85b890690cbcc4817ff9ba12c1e46b33bbc8ef4aa7b375c5011b2c5f9486cc5627bd640f90c7a63a4217aaed260fcd18594d42214ec04ddef3d8717217a49b1c71dc7e7487fd8d7aca8a49764ee593ed4731516520550273a35bee4d10f429ce1c1cbd95ec33a7696f3e3fc50030031ece9bf895d2e7a5b8ea3a70258019c4427d5c9775195c8354008e3f1d8a3391878b1b1e436341b7a0fe980de393a3bdbed57ce76b176b2fea483b952b850389bee2f5f726fa54b6036a5a276707de0d1e37f70beb82c020db2be7790e00c5e0fde8cd65b13c1e589d65c8fa1a2650fa48e157c69667242258bc47ff172bef81a6d4fa1621f682277e6da0fb7a37de145aedb64dd84f0a2276ad3d3d2e9049b1541639f2ef4c244491feae0bb9364e524f6b4c16b5beaf4e0458edc466d585d5b07b417e0ccfe7ad3972cb2410eb0b463069ce8a55286a566e22b792930df15cb789563767251a4669e293ee77ccf96a666b3792f578aea6506ffdedf5780449d2abe162ed5dd75fc9784d27a1899f97542aa174334d9884ab8f29407f1ab0637c717f80c822268060b813e0d259359f6c97a08b9e448ec82f27782e9c2e0f2f42f9de908c0f09c3318e4dfda44d9a063a8f0c0c3c6feac5d033fe59ae827db595bf7bbfa08206e5c9e7074a76a61ba0863b12697590763c2e22d4e6cf570ee4323e85c52bb28ed93a462d18d9fba8862859dc403ba667a584180f4319fc1fbd6e5efcff7b765ddeec120fc4946c0e24dba5f662035bc687e6f34c54c3754fcbd27f72c7dbbe3bd67c7c49f58924e1a8d9bbab03c678ce55416411ed9928a3a5bd60d605d77d845b8e216de559f36a5ed26029bf3423f99bc663aca6a05c282d162f4a824ab8fe63a76b8c4d828c445a71800ff103a4f40191e1233a5da146b7f0a16cd2c2f39b67788400ab5813b5cce548efe408c5af915afb018a3fc7ed22e69de905bbe357027b7b15b54f9047cd4b6fb7647cbfa673226fbe130de440a8d4c687a1df1405a3b00ab423e9b846c032f256e0c90d155ae6482614c4aa37932ba15955ccb748172ab630b88a7304cdc9bf25f0dc96d2791175eb58aded7557792e50f34a805c6b1fde4f665af8093de5655ad8823ba728fac38b0dc55a4cfc0d991ba7ae21a463edbffd567b147f88bd2a46093f0fe08482c47b511168a6988dc3c1dcfa58904cc2f25f9c15674cfe9373aebe54d1affb08cb5e8c7593b4be650c63190b68788b8a647f65dceebe779852460040e9f6f2bc852fe3131851f4d5b30e1cc0eb423d746d05442558e78721cf3bb20b2d4a099a2016a3a959607d563b705719130c1983eed979472922538e2e30ee8e5a89a77269691b3d43da1a693cd2a4c2540f7ffb7f976fac9d8ba4c3764abaef6798b132d94b233e9a1bb331a2731f12ff9d86130a38f87e0a49a42acc2ce7aa5b8f774ea2e4dce689a257c7984fa20fe66a14076f639f9637f3bfd6752a8d6325562c9f0e37edf8d8ad9efd51150b6a89216110020df1b3d0fac33710028138146dd296c296ccbd8a08b1c742ef71cbbdd92adabfed555cc9fedee25a13fd7351fe1454c24579883514bb4d90632a24a2b08c0d188fe2e873c880645b7e6664c1e05f8ed6b932db2cba90e70b1a11ce7cc0737f067aa917f4b13ba080b6d4859f409391964a9e6cc90ea4e807c5133f8f88d82af81560a713a832dd8ffab47b02aec27d209589d57f463882d8a07b977cbe2102fea6fba771ae5baa792dd649c665a1511eb9e510e3457c4620590dbe8adf11353384a336f466f10c11867bd4c280e881249468b06b2d203213d1d8caf16dfaf26468346d2e56fdb78f0ccc61a6699c73c5826173e6e0c8766e1709a178c90637433211963f98d0814441ee088fe417b93616d2abeb7426648075cf48803b8888c78b114fb247c260ed33cc189e36fa90c6188b42d21167fd435d5e8ddfbd1df29438906181730a10a868f565cbdbbb4f9826454d357fc62970032c981935de0f8c3d24575aa567bb3d145921bef14337fa579c11be9d3f0f726da12d25dc0395f1226005b9c7a22896b619e4df7a919379848b045bd21d4f4098f62ce39e3926ec86626893e6ee8ad8d8e1559e6f7ab632d1ca040966840ea895fec19bf3da0e5662ef4df87a673b71e2542af88469315be72dfc9761cd3c8c789f9ed0dc04c76a9deb81e2ceab5e730260235498d0545b8f95784748c03a9a23cf107126550c0b252f0eff8ba44eb11906613a29fbef826660bba1f2ca83045354dda6060711e22e94dce58f9ef29178102ac7f77a3b7d9461aaf21a1f6ab09f33b272a23e6a0455aec33681f7ed27c0b083e40c5c2c3a7221691f20605b25a3d38e873cebbd5d99da1637f8a6e62bf14b30f5ebcc90a658eabe600c7caaaaaed0070ad9dc03154fb456009d8f99136fe1032b4a20d5db6abaa52a6505328bb0dabca55b87aa136c7d0eccec4678cda70dc81d332d0fe02f619f2324ddf9a4ea975e1601ee8130ebe9ceb5351704c58d2b8e123f857058f4cfa85cad627f008511d3b3d0af5146cc8e41a4da4f4d2740e3a23d9359355ce4736ad81b5173feeea9dce185abcefb5727172692e33968607d8576127773c5f03612447bc1d497cec781304b6f3f6425ad6512a2feec098038175e8e872ba64aef000a15c1b2d46a430188b2e9de93a1f19ff1efc19e777cf0ea1c0f25f3ec75d995a40f0856042172294cfa33af5e4c186101ffb1b49d13bc53629ee611d42035c59a6e6d375bfb49cb7c8e74841bc798acf6327d69ee76b77e4df57a921ba0928677789ac2e671fdb0c0393cc51e7bdc4c182485adab8116a69850ab1fc068a9a27e9305b67bea4f26fdeb42b93d1486cc349ae01b0dfe1c465f6949d8e8dcfda85bf434896276aa415a15d58692b8fa896ffec5f9251a79e15e457428e5d1c0ea23b2198fe61d6dd74066ca45bbcf5d0751b6a62a5ce044384c6c3bdea0b55b208daa919bdf573219895020ddd6a54e3e8cbba743c6ebf9c015a98cbb16922234c6efdf7b64a91f08f36345f1c991dcc1cea57444b5349d97aa5907455e392a38d8b21a5bc2369d6200711b31290b74d911584dc97f0a82ac4348d9c615cf07ba53dc72b617f1e1525979a0d840690d2b452950febf7c1601c2e6b9f2287d628ab7059d2df922292a208c5f8ef7ca63d9186f55b29396f5d1cd1c5567473fe4eb6c887fab517f0f9de3740e08b9aa8ee1ab258931b7b72b3512ba7be90227c2f6c8b1459ab9ee0517202b6c5f289d330e45db8d57f94379c58b8afba0e14d5e14ee753151a9ffd71f4cd5ef978552d09dc66a2ad736e3d57b1a6d76aa652d5e703c2fa05b04f44e6a4a2afd7cba9a84106594bf5718fad544591ed079c2a65d9adbff2ab7d8d8cfada0b50ad377a4e3d71f062cf6bc485b5cac4c98a2d64cfca4ed102963235f118f1d462802ac854050dbcbfb82cc4fcc137487f4d1215f2dc944e33ce588469bc2f7a2884dfbb3242a6d42c88c4640094fd0e0a557133f79074116dc3568f27d9ec4bcc54da41a0d647a88a404aaea0c453956704bf4d15007d810b569d405b042cbf0cbb3b35f90e6db2e3d1cbf1dc2722cd995d228ff601940086ce52cf17297b3874e97a09ac4c929461b2401716c430caacd87ffbb23aa76d0ae73c9e7044a0ec8500a2cbd8976496422dcd2b0a67f7ff7f5bff03f055f30dc20a6c1761ad3565d16b3befbe9931b2c4abe59214a9dc383f3d659b842d014aa2e11ddc34c3f5a2e956322cd2fbd9991e85fd252ca1de314dde0b5488f0799289613142a1f9bb37682546223444e5b933a765377975dfb5924c8c7f7b5cdfb6d67cad9fe5945739555cb766f8daa84fc36f3c18206b17c846daee01df7fb0a3cce2d355558fca326d26ee8e00147bcb55b917a069a27f7dc022376ce52e61694e4664b484c1cb64487994769aa616025ea347466b2038ba5b6d172cb19f4c35dd4450ea0602bebdda1d64b362ab542a0f71c514303457e6d89670513257bdec66404563aab9ccf6c29b54263843c09dc93320acfb8c166643f974a01a8f5feb91f745bd25e99e37df0af5a7f10a074ba0dd85decab2d8dd24628db71e2b24450b6f4ac6e386ab93fe31c638cb688bba1f217654798d7ca55df86b080e21e32caf3924fa97216f3c2ac634385e65571b40fccf6e9953a093a10f771c0a3807dfbfe4f7a91d1e178e8d5ef634c181b62aac480c5bf32b264441f2871c3fa6999bfa40fdc912fa7667767d543c3f5070137238a6580a205394bc9b8abd594fe67d6288ef08b85b77e2fdeaea8c71f2ea21217a0a6175bc094bb15a8f86522ff549d0b727b0039b9b603f3a294a6e577478bea2a8517e0411c8124b505b43d6bcc1ee6601eced1d7f243bb2d811277900472db1eee628fd4e34fa81e96927b6c5ccf367737cb0284c22217f2f6daf884142bd5de922e447b63795029aeca9850a8e19f3ad9d0846eb4dc69f6b3903b1bf86f84c87608b1450586b7e2d797273d695a15cbfe698197902a5ffc4449f72b7255a7c642f628e20ef9829c9248e51721925ac13311ccfb872feddff36b53cebcb8ba4770b52f95657cbf2f97a62c2cb580cc924401fe9cd0f9a741e5a181940b820f765296af02bc44581d2dd2db8e3f974a37a4852c657bcb903bebf013e081a25c8bf687d9810092f8a6965e851a9c09dce1af0f6ccf65ea769c18861fb7fb8b90dcf481c1a63e13b2d3c08c91efa405a91f7fde148377fef01da516fbea2127b05066a8f6d9a3f46731fbd3f89e34e8e926573a7f46296ae8ff883103db824703aaede9ce8e3a88f39abe00cfcbd1f860e47f024a3049055f9b6fc97fdb01affdf07ded1602cc3e337f09e91c09d26c63db0311a580b13f3c0a465bc33109fc8c208bb72ae7fbdfc19a0ded3fe5e491d9f3a8a1800c600fa8dd1bb2e959d12f7ab8bdee3f5acdcd48b951d61da81f73ad56b5a91fe8d5588922ac4e2ed7ceb7a821e9dcd9b8f2b07067c2d7bfb45eff144f2fc4bda2d568b7aba304284d423f54412149bf359f9cb3120c9f8081ec8ff1c71dc8695279e6825be2be79f7b5608a92a0e1b1c1037512f86012efb967af9b6d6e1429282da5e8f6a7c583a316d7901ea021d34ddf41a7abe33a0563c059b6a0dbfc50650972931ff90b02aaa04c998f3da30b13f13f13e164bb3068789db97ebb17a374923e2b983193881747cc12e5fc6f4366b17dca655f9d354bf9e8101cbf5fb51846875bb4817189108cad7b523d82f688c0594dd2acb1c820004063c3eb8e4bfd1a13c2b87506615411ca606c11fd1ce385b03947a7a403924b606a5489324cf42737c40c598cf20617943c235f66fe256f9d3b60b9d37b9821e473a69b7b6479e342acb4a1c9f33209f6c5674558b6bc9c57f559e4881b49dfad009752ee3546557d6ca67d605e3d4a96c7627c4d6ddecf39061a021edb2f788202dea49f8e92babab6f899e1a6fb4b6725fdf41d16e57c85b306d98343c33a511f34a3cc875f197f8d839c072a97062cd5ad28b58d6107f229396e8e25aeb48d3e389eaa72610e67db2c6784632be4096aadf07ccdd1984511fc14d3833c1cf0db82c400e2cb55a18b6f7c5b876673aa3876b5b629590cadc947988a0fbe0965d3d29cbcc91ff3b958d603a09d5a6713eb41bdba1c86761dae80c944c2434c72aeef6e6c2d65f8e55b9901178f15424950d831af3519225aa6cde57596c4727b7f4f34f4e7af54aba781cc8d148584be050f6dc6636059a4ecbaa1e1afe7c3d3ea6e08d55516cc3535110cdde1ec794a55ce7592390313ae36be8c9b186da0e7ed7d1b9c264337586bb26830e6a9e710b3ecab7e4871433b1289c049a605ea5fb645b2b1cffc4e3421661af1c085f29e92408e62f226ebdc818a131c991716f7f3f3659207f7478a4e1be7e875db0f4f1fdf2a506b75e611603b4f574dcacb8f76d8c229a4fb87714bb9b1a876aa03bd1f7bb4a75ec21d0d4d7ea981bf57c02a4b1473161b32dbafbdb2529b34b00a92f5018597d0ba5f179abd81440915e82082a669512ebeb491a5e024515c1a1f5f68ab4eb1c2dee3b35abb36465378fd52561027f6b78b908e0f384f6e862371edddbcd23b8db808a27e444384bd24c5f871f08da9b37d742c5d61b11335b1a234400c6b25c8ead6f57cdcb510602d5cd39eeef0c286603ad7ba804b7ea12001ed1b4ce409c195d072b91595d3c9189e5ab74f681ff82bc3ffffb443c38baffcbfb6fb9e796e5c44438e05ee264b90230325f52eb3b9579448830eea6159d3adde5a6030d370c7205d94502ac317fe6d021dc46ea8f32620ad19fa2ce6428921e17d7ae5e91f21714a88253d056ba0fb22e1c3483bf678319a80e985d418b57495c773c9f087132504d92c407839e93d38db93abf808df222a440241e47ffd1f52de83233732c703c69dbab3a78d790aeae23cbc317d28807f22c706bdacc71335c91bc6515fc42959d597c25f2c9f8945c06a69ab4b8161517881e4e0df1438b14a2faaaa30299b22ad26a6836672344123ae68889bb1c0229e8de43425a266bdabd09e35dba8bae1a59ff5e243139b712c5041cba9164177f475a2aa694dd6936a2505cb8041d0a0aa91a5f3ab5f83e72dbfd0f3803a9179548ad3d012c4ea88c1ab8767b6cd05cb070f9a02defacb9b5b660c5716a81f8c0ffc81117cff1f10fec942b71a46614326ea43c2ec3cd8d837202ca5d56d5592a0a3270d8b6e4f9d6360264a52e244c324a4061eeb2fbd68993d15c1e7ce9d7310c104b65349285d17f5e4177deee0926583598fbf4b7c862b90acd822ba385f805f632a4191262a6696d41af38a25ddedcc58c6156cf16e4a3c21e1842b63e71c3832f70f27228e5746023a65aa990c1ef9d5fdf6c744bb67a380d958f4cb3102c178029d75d1acfc72502b677f651aedc4c447bd22f4ccddd3c755b17c36ba19e50e8c05c501792e0e8bcf73b1c8bfbc47fa5fdf2f364893e7cec948f46e3e126bb4dbb54d83c3e388e599ee57301e46199b43fd6f988977c27e0dc7f1a4b05b428e4b22d0d7d6d84f7fcdfcf71ac8a195d04a3a0b59d65056d93ae2ee3651076aadcf62e8ec9fd3d5a98b0219a0d3a89ec962adbe6175929223dfa1f72ac7c21f155ff2890e07d8ca008689181c31c33b941cb4b04b361186aee74dae9bfa8c8269ac08e12ce9f11179bbf9a3f4c074cd54dedb4cb417edaed2da833524b6c77390618b8a02b8e2143cb8f4b9204d036cb07cd03c600e12033e0b1987d4dd1e50ee45fb161a134e8aeab3905ccb68fbc669057ba850c3d9a8a3dd53e7ee87e1e482711ed058cdd8a4251719eac60c51ec343b1b9f1ac1e397a9c740e5033141a128d97407e070783e820ee2e4271b54b8ef1b4de99eb7724c01714bbe89ce9c3a5db0f6641d446a060849b682d34a504124d15ece4204271a0b28e43e6f1f4e5440499800aeb3fb6622598cb38ee0f2ad5e492ef6c01a5fa4d929c59393056e8c6edc27984733211a09eaaca7c231d76c11e45abe14697de521273ea8a42c3e445d111bc3d13a0f543db92daee1b2d4d04545d8e1b9641a1dc75f195f36a5639bcae03d1aea178803f935bcc7f8495add828b8138f29bf5f7d61477922c411e182303b6088977f4062abbf9fa2a3a5077d0ad81679c45a3eb531d6dd8ac4bb86ee0ba96a1c2c76abdc3a76779c5dc543aba97de004ea30a0a85b9428dc1e24494d333624e1d6217e5c20f71d9f1223b17af1f90c8c34823f907daf3be1539dcdcbb8c812f868b29d27768e0b0d9779360820ad3eb30eb18215bc9b5ed4cf", 0x2000, &(0x7f000000d440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008780)={0x78, 0x0, 0x9, {0x7f, 0x200002, 0x0, {0x6, 0xc4f7, 0x400000009, 0x8000000000000001, 0x8, 0xa62, 0x200, 0x0, 0x5, 0x4000, 0xb0000000, 0x0, 0x0, 0xfff, 0x4008001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001200050104000000fbdb9f2528001a00ac1414aa0000000000000000000000000a01010000000000000000000000769abd0dd8"], 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) 20m59.091358029s ago: executing program 1 (id=178): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x640100fd}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000040)="ee10dfc81cd624d1a4e1a0da0fe2ea84413987dd7895cd864c978689b6617e9e3664ccddc647a27f287e4ad83b561f1110cd111a73ace76fa6bd6097e852323d32085cbe239d71d0a611b5ac7af8254c6d21e023af2cd58842309c8fa0f4b2a9714ee60536150732e0993386e0b9426848", 0x71}, {&(0x7f00000000c0)="53e19b4f0b28b9bd45117b2a10", 0xd}, {&(0x7f0000000180)="7ed929ebc8757940d70a46abdf8462a2fc6dada358cfe991a0ecfe19f941ffe6cf353e7cb16638f4056a4fd9941baee707c4a8c51fb181db39a840061c0c4eac8ca9832b194031e41d78377e", 0x4c}, {&(0x7f0000000a80)="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", 0x6cb}], 0x4, 0x0, 0x0, 0x24040000}, 0xc0) socket$inet(0x2, 0x5, 0x0) 20m56.04419983s ago: executing program 0 (id=185): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) 20m52.763390497s ago: executing program 0 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c065}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 20m46.33280021s ago: executing program 0 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x8000040) 20m44.375590539s ago: executing program 0 (id=204): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000008100), 0x4) 20m41.008256055s ago: executing program 32 (id=178): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x640100fd}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000040)="ee10dfc81cd624d1a4e1a0da0fe2ea84413987dd7895cd864c978689b6617e9e3664ccddc647a27f287e4ad83b561f1110cd111a73ace76fa6bd6097e852323d32085cbe239d71d0a611b5ac7af8254c6d21e023af2cd58842309c8fa0f4b2a9714ee60536150732e0993386e0b9426848", 0x71}, {&(0x7f00000000c0)="53e19b4f0b28b9bd45117b2a10", 0xd}, {&(0x7f0000000180)="7ed929ebc8757940d70a46abdf8462a2fc6dada358cfe991a0ecfe19f941ffe6cf353e7cb16638f4056a4fd9941baee707c4a8c51fb181db39a840061c0c4eac8ca9832b194031e41d78377e", 0x4c}, {&(0x7f0000000a80)="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", 0x6cb}], 0x4, 0x0, 0x0, 0x24040000}, 0xc0) socket$inet(0x2, 0x5, 0x0) 20m40.871226969s ago: executing program 0 (id=207): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294", 0x31}, {&(0x7f0000000900)}], 0x3}}], 0x1, 0x20000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 20m36.525028794s ago: executing program 0 (id=213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3c, 0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x640100fd}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000040)="ee10dfc81cd624d1a4e1a0da0fe2ea84413987dd7895cd864c978689b6617e9e3664ccddc647a27f287e4ad83b561f1110cd111a73ace76fa6bd6097e852323d32085cbe239d71d0a611b5ac7af8254c6d21e023af2cd58842309c8fa0f4b2a9714ee60536150732e0993386e0b9426848", 0x71}, {&(0x7f00000000c0)="53e19b4f0b28b9bd45117b2a10", 0xd}, {&(0x7f0000000180)="7ed929ebc8757940d70a46abdf8462a2fc6dada358cfe991a0ecfe19f941ffe6cf353e7cb16638f4056a4fd9941baee707c4a8c51fb181db39a840061c0c4eac8ca9832b194031e41d78377e", 0x4c}, {&(0x7f0000000a80)="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", 0x6cb}], 0x4, 0x0, 0x0, 0x24040000}, 0xc0) socket$inet(0x2, 0x5, 0x0) 20m20.752399532s ago: executing program 33 (id=213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3c, 0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x640100fd}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000040)="ee10dfc81cd624d1a4e1a0da0fe2ea84413987dd7895cd864c978689b6617e9e3664ccddc647a27f287e4ad83b561f1110cd111a73ace76fa6bd6097e852323d32085cbe239d71d0a611b5ac7af8254c6d21e023af2cd58842309c8fa0f4b2a9714ee60536150732e0993386e0b9426848", 0x71}, {&(0x7f00000000c0)="53e19b4f0b28b9bd45117b2a10", 0xd}, {&(0x7f0000000180)="7ed929ebc8757940d70a46abdf8462a2fc6dada358cfe991a0ecfe19f941ffe6cf353e7cb16638f4056a4fd9941baee707c4a8c51fb181db39a840061c0c4eac8ca9832b194031e41d78377e", 0x4c}, {&(0x7f0000000a80)="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", 0x6cb}], 0x4, 0x0, 0x0, 0x24040000}, 0xc0) socket$inet(0x2, 0x5, 0x0) 17m36.694979203s ago: executing program 3 (id=426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 17m35.185856331s ago: executing program 3 (id=429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, 0x0}, 0x0) 17m34.743074899s ago: executing program 3 (id=431): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000440)='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^c\xfe|\xba\xe0\xc0\xb6\x92\xf5\x102\x14\xca;\x912\xde\x1a\x05\xbc=?\x9b$\xadu\x91\xf5\xb2\xe6\xe4\xbaKYQs\xdf\f\xea\rQ\nkjD\x8a[\x15}{=c3\xe0\x1et\xc9`L\xe2\x00\x7fC\x89\t\xe1\r\'\xe4@\xbd0Tus\xa7[\xdf\xfeQ\xbe$\xe0g\x82\\Pa\xc6p\xd1\xee[\xd3\xce\xb3\x06\x90)\xb2L\xcc\x85\xc4A\xb0\xea\xadL\r\x86e\x19\x98\x114\xb8\x8aLV7\xf2\xc6\x03\x17\x1d\xf6\f\x0ep\xe5\x8e[\xab\xd6\xb6\xe8\x8bA\x80|1\x93\xfd\xaai\x85\x97T\x84\x80\xa53\xb8R=\x1aysc\xe6\x01\x80\xf1p\x11]\xdf\x8c&\xf3K\xbd\xc1b*\x9f\xc5\bD\xfa\x84J\x1f$\x90\x88\xa3\xe6\xa5\xc2\x8e\xb6\x0eK`\xa9I\x9e\xba\x8c\xd7\xa0\x11}\xd0\xacv\xb8\x1fs*\x95{v+2!AM\xd9u\xea\x12\xa1\x1c\xe4\xcb\xb1OC\xf3#\x9e\x8e\x17\x814\xf1~\xdd\xdc\x15D\b852\x8d\xff\xb1\xfc~~\xa7ol\x0fL\x9c\xa5_\xf7\xb4\xf8n*\xfc\"\xd4Yn\xdf\xbc&\x04\xa2L^\xb9\xf3&\xe5l\xa9\x03I\xcf\"\x15\xcc\xe6\xacTQ\x1b\xfeu\x93\x8b\xa9\x14JQ\xb4\x9b\xcb\xaa\xe7\x85f.}n~\xa3?\x9a,a\r\xd5\x9a\a\xd0\xcc?\xcbq\x95\xfe\x9bm\xae\x9e\xeay\xd5\x96\xaf\x1c c\xe4\x93\n\x06\xa7\xa7\x9b:\x01\xdcb\xa9\xa1\xecxC\xa5&_Y\x94\x01\x1du\x9cs\x93\xe6 \x01\xb9\x02}r\a\x1dZT\x9egq', 0x3) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 17m33.862071305s ago: executing program 3 (id=432): mkdir(0x0, 0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x8010) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x3, 0x2) rseq(&(0x7f0000002d80), 0x20, 0x0, 0x0) r5 = msgget$private(0x0, 0x1f3) msgrcv(r5, 0x0, 0x0, 0x3, 0x2000) msgsnd(r5, &(0x7f0000000040)={0x1}, 0x8, 0x0) 17m32.038881854s ago: executing program 3 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) open_tree(r4, &(0x7f00000000c0)='./file0\x00', 0x100) 17m27.470142513s ago: executing program 3 (id=437): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1440, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$l2tp6(0xa, 0x2, 0x73) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x0, 0x7fffffff}) 17m10.851652756s ago: executing program 34 (id=437): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1440, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$l2tp6(0xa, 0x2, 0x73) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x0, 0x7fffffff}) 13.167653779s ago: executing program 4 (id=1452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0xfe1c) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x10, 0x80000001) 10.045905827s ago: executing program 4 (id=1457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 9.135704566s ago: executing program 2 (id=1459): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 7.117892203s ago: executing program 4 (id=1460): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb4", 0x2e}], 0x2}}], 0x1, 0x20000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.704609363s ago: executing program 2 (id=1461): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) 3.811052991s ago: executing program 4 (id=1462): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="f2ab670f01c90f20e035200000000f22e06466400f213926660f65d166baa100b800000100efc74424002c000000c7442402bde689f7c7442406000000000f011c24400f0866baf80cb8f0f7488bef66bafc0cedf3470fa7e8", 0x59}], 0x1, 0x48, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x7f}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081", 0x7}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4001) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x2d0, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.810764402s ago: executing program 2 (id=1463): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000540)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020) 3.540625367s ago: executing program 4 (id=1464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0xfe1c) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x10, 0x80000001) 1.039747759s ago: executing program 4 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c554f1919d845e30000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000841) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25170000005400068014000300322d73355fd5955d482ee5364c4323843c00040067636d2861657329000000000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x82341) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r6 = syz_open_procfs(0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r7, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r8, 0x80045643, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) capset(&(0x7f0000a31000)={0x20080522}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x6, 0x8, 0xfd5, 0x7fffffffffffffff, 0x4, 0x7ff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14b00007000701081b3100000000000003000007"], 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x24004004) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000fbb9b634b8f978cf17e03dfde3633e4d6a9fef22d8eb1a066ae9b288c6c5c1f98ab386be60f601032dcde8d553261f300a234858a5aeebfd8101978fa50b2cba1eabbf24bd51495ca29fddd91087044d62876f4db69309c1657726a1c3858f4a2596c4cce448775fead14a067e2af05eea4afb49d84eb8531cb4", @ANYRES16, @ANYRES64=r8], 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x4052) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000005c0)={0x70, 0x101, 0x0, 0x595f314c, 0x19, "00e47903e5951edc064af900"}) 555.473575ms ago: executing program 2 (id=1466): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 158.563715ms ago: executing program 2 (id=1467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1468): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) kernel console output (not intermixed with test programs): g ep0 maxpacket: 32 [ 976.011956][ T9857] usb 3-1: no configurations [ 976.011975][ T9857] usb 3-1: can't read configurations, error -22 [ 976.012481][ T9857] usb usb3-port1: attempt power cycle [ 976.360875][ T9857] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 976.385987][ T9857] usb 3-1: Using ep0 maxpacket: 32 [ 976.386982][ T9857] usb 3-1: no configurations [ 976.386998][ T9857] usb 3-1: can't read configurations, error -22 [ 976.510975][ T9857] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 976.531860][ T9857] usb 3-1: Using ep0 maxpacket: 32 [ 976.532919][ T9857] usb 3-1: no configurations [ 976.532938][ T9857] usb 3-1: can't read configurations, error -22 [ 976.533509][ T9857] usb usb3-port1: unable to enumerate USB device [ 979.672670][T10533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.027795][T10533] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.075146][ T1524] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.075339][ T1524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.303529][ T1524] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.303738][ T1524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.333012][T10793] UBIFS error (pid: 10793): cannot open "c:::", error -22 [ 980.811129][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 980.906351][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 980.959984][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 980.986480][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 980.988585][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 983.018809][ T5619] Bluetooth: hci5: command tx timeout [ 986.541215][ T5619] Bluetooth: hci5: command tx timeout [ 988.095411][T10583] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 988.186635][T10583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.232617][T10583] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 988.283320][T10583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.617607][ T5619] Bluetooth: hci5: command tx timeout [ 990.345188][T10583] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 990.407163][T10583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 990.442189][T10583] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 990.516566][T10583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 990.691165][ T5619] Bluetooth: hci5: command tx timeout [ 993.264903][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.265056][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.524554][T10583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.266500][T10583] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.295453][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.295652][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.295871][T10798] bridge_slave_0: entered allmulticast mode [ 997.322886][T10798] bridge_slave_0: entered promiscuous mode [ 997.367354][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.367759][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.368084][T10798] bridge_slave_1: entered allmulticast mode [ 997.374419][T10798] bridge_slave_1: entered promiscuous mode [ 997.641317][ T13] bridge_slave_1: left allmulticast mode [ 997.641345][ T13] bridge_slave_1: left promiscuous mode [ 997.641542][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.722087][ T13] bridge_slave_0: left allmulticast mode [ 997.722114][ T13] bridge_slave_0: left promiscuous mode [ 997.722313][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.329221][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 999.395123][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 999.441189][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 999.497503][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 999.518668][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 999.705215][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 1000.093748][T10933] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1000.093826][T10933] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1002.630631][ T5617] Bluetooth: hci0: command tx timeout [ 1004.063380][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.133888][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.185854][ T13] bond0 (unregistering): Released all slaves [ 1004.799758][ T5617] Bluetooth: hci0: command tx timeout [ 1004.883964][ T1524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.884070][ T1524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.965566][T10946] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1004.965629][T10946] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1005.630219][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.701669][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.947488][ T1567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.947672][ T1567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.335899][T10954] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1006.335979][T10954] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1007.013061][ T5617] Bluetooth: hci0: command tx timeout [ 1007.117132][T10798] team0: Port device team_slave_0 added [ 1009.170898][ T5619] Bluetooth: hci0: command tx timeout [ 1009.258120][ T13] hsr_slave_0: left promiscuous mode [ 1009.323621][ T13] hsr_slave_1: left promiscuous mode [ 1009.324928][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.397495][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.597258][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1009.642935][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1009.648779][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1009.650421][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1009.684560][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1011.870251][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1011.900963][ T5617] Bluetooth: hci2: command tx timeout [ 1011.941973][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1012.273522][T10798] team0: Port device team_slave_1 added [ 1012.874629][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.874651][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.874683][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.898596][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.898615][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.898643][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.702728][ T5617] Bluetooth: hci2: command tx timeout [ 1016.815478][T10798] hsr_slave_0: entered promiscuous mode [ 1016.819053][T10798] hsr_slave_1: entered promiscuous mode [ 1018.578932][T11015] Bluetooth: MGMT ver 1.23 [ 1020.655633][ T5617] Bluetooth: hci2: command tx timeout [ 1022.484819][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1022.695609][ T5617] Bluetooth: hci2: command tx timeout [ 1023.238859][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.971'. [ 1029.478094][T11079] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1030.880609][T11100] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1030.880672][T11100] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1031.920683][ T5617] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1032.867958][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.868517][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.868870][T10919] bridge_slave_0: entered allmulticast mode [ 1032.899730][T10919] bridge_slave_0: entered promiscuous mode [ 1035.092187][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 1036.190275][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.190625][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.192637][T10919] bridge_slave_1: entered allmulticast mode [ 1036.221333][T10919] bridge_slave_1: entered promiscuous mode [ 1036.432313][T10919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.619231][T10919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.023344][T11129] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 1037.244318][T10963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.244828][T10963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.245216][T10963] bridge_slave_0: entered allmulticast mode [ 1037.288953][T10963] bridge_slave_0: entered promiscuous mode [ 1037.473299][T10963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.473791][T10963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.474125][T10963] bridge_slave_1: entered allmulticast mode [ 1037.478553][T10963] bridge_slave_1: entered promiscuous mode [ 1037.570055][T10919] team0: Port device team_slave_0 added [ 1038.047792][T11142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'. [ 1038.858891][T10919] team0: Port device team_slave_1 added [ 1041.053731][T10963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.289549][T10963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.326851][T10919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.326870][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.326901][T10919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.500105][T10919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.500126][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.500159][T10919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.689894][T10963] team0: Port device team_slave_0 added [ 1042.001220][T10963] team0: Port device team_slave_1 added [ 1042.303701][T10963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.303721][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.303753][T10963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.348071][T10919] hsr_slave_0: entered promiscuous mode [ 1042.350413][T10919] hsr_slave_1: entered promiscuous mode [ 1042.353135][T10919] debugfs: 'hsr0' already exists in 'hsr' [ 1042.353162][T10919] Cannot create hsr debugfs directory [ 1042.356240][T10963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.356254][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.356281][T10963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.081967][T11160] CUSE: info not properly terminated [ 1043.659240][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1043.901714][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1044.055639][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1044.088021][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1044.098912][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1046.446995][ T5617] Bluetooth: hci4: command tx timeout [ 1046.815075][T11175] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1047.451967][T10963] hsr_slave_0: entered promiscuous mode [ 1047.454814][T10963] hsr_slave_1: entered promiscuous mode [ 1047.493073][T10963] debugfs: 'hsr0' already exists in 'hsr' [ 1047.493105][T10963] Cannot create hsr debugfs directory [ 1048.611647][ T5617] Bluetooth: hci4: command tx timeout [ 1050.019330][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1050.692428][ T5617] Bluetooth: hci4: command tx timeout [ 1052.431018][ T13] bridge_slave_1: left allmulticast mode [ 1052.431057][ T13] bridge_slave_1: left promiscuous mode [ 1052.431359][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.571827][ T13] bridge_slave_0: left allmulticast mode [ 1052.571856][ T13] bridge_slave_0: left promiscuous mode [ 1052.572053][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.660951][ T5746] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1052.711127][ T13] bridge_slave_1: left allmulticast mode [ 1052.711156][ T13] bridge_slave_1: left promiscuous mode [ 1052.711430][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.772244][ T13] bridge_slave_0: left allmulticast mode [ 1052.772273][ T13] bridge_slave_0: left promiscuous mode [ 1052.772489][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.773655][ T5617] Bluetooth: hci4: command tx timeout [ 1052.810880][ T5746] usb 3-1: Using ep0 maxpacket: 16 [ 1052.816753][ T5746] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1052.816783][ T5746] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.816804][ T5746] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1052.819194][ T5746] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1052.819225][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.819239][ T5746] usb 3-1: Product: syz [ 1052.819247][ T5746] usb 3-1: Manufacturer: syz [ 1052.819256][ T5746] usb 3-1: SerialNumber: syz [ 1052.909113][ T5746] usb 3-1: 0:2 : does not exist [ 1053.377323][ T5746] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1053.540571][ T5746] usb 3-1: USB disconnect, device number 52 [ 1053.612001][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.695935][T11228] udevd[11228]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.741674][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.802659][ T13] bond0 (unregistering): Released all slaves [ 1054.301981][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.336397][T11232] overlayfs: missing 'lowerdir' [ 1054.362715][T11232] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1054.381918][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.424526][ T13] bond0 (unregistering): Released all slaves [ 1054.630206][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.630352][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.480863][T11246] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1055.480915][T11246] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1058.015177][T11260] UBIFS error (pid: 11260): cannot open "c:::", error -22 [ 1058.410911][ T13] hsr_slave_0: left promiscuous mode [ 1058.450817][ T13] hsr_slave_1: left promiscuous mode [ 1058.452884][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.493402][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.670825][ T13] hsr_slave_0: left promiscuous mode [ 1058.711028][ T13] hsr_slave_1: left promiscuous mode [ 1058.712375][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.731962][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.553904][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1059.602645][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1059.721868][ T5617] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1060.230393][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1060.281021][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1060.284284][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1060.306673][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1060.309809][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1061.616102][T11278] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1016'. [ 1062.012005][ T38] audit: type=1326 audit(1778505295.742:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.2.1017" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a61aacdd9 code=0x0 [ 1062.281812][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1062.363304][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1062.760583][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1063.765197][ T5617] Bluetooth: hci5: command tx timeout [ 1065.732728][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.733072][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.735161][T11155] bridge_slave_0: entered allmulticast mode [ 1065.744406][T11155] bridge_slave_0: entered promiscuous mode [ 1065.835171][ T5617] Bluetooth: hci5: command tx timeout [ 1065.866339][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.866541][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.866778][T11155] bridge_slave_1: entered allmulticast mode [ 1065.882838][T11155] bridge_slave_1: entered promiscuous mode [ 1066.072660][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.170646][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.614496][T11155] team0: Port device team_slave_0 added [ 1066.708623][T11155] team0: Port device team_slave_1 added [ 1068.404701][ T5617] Bluetooth: hci5: command tx timeout [ 1070.446443][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.446463][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.446502][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.579180][ T5619] Bluetooth: hci5: command tx timeout [ 1070.656241][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1071.271722][T11365] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1071.278158][T11365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1071.280152][T11365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1071.316724][T11365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1071.760557][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.760577][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.760606][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.585112][T11372] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1024'. [ 1073.935697][T11365] Bluetooth: hci0: command tx timeout [ 1075.125528][T11155] hsr_slave_0: entered promiscuous mode [ 1075.135765][T11155] hsr_slave_1: entered promiscuous mode [ 1075.185435][T11155] debugfs: 'hsr0' already exists in 'hsr' [ 1075.185465][T11155] Cannot create hsr debugfs directory [ 1075.553840][ T38] audit: type=1326 audit(1778505309.282:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.4.1026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03fe4fcdd9 code=0x0 [ 1075.977714][T11365] Bluetooth: hci0: command tx timeout [ 1078.414155][T11365] Bluetooth: hci0: command tx timeout [ 1080.453515][T11365] Bluetooth: hci0: command tx timeout [ 1082.986620][T11282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.986975][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.987313][T11282] bridge_slave_0: entered allmulticast mode [ 1082.998744][T11282] bridge_slave_0: entered promiscuous mode [ 1083.032396][T11282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.032745][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.033040][T11282] bridge_slave_1: entered allmulticast mode [ 1083.037475][T11282] bridge_slave_1: entered promiscuous mode [ 1083.291837][T11282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.338777][T11282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.453759][T11282] team0: Port device team_slave_0 added [ 1083.478294][T11282] team0: Port device team_slave_1 added [ 1084.087617][T11282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.087637][T11282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.087667][T11282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.318572][T11282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.318592][T11282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.318622][T11282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.548148][T11282] hsr_slave_0: entered promiscuous mode [ 1084.558673][T11282] hsr_slave_1: entered promiscuous mode [ 1084.571831][T11282] debugfs: 'hsr0' already exists in 'hsr' [ 1084.571861][T11282] Cannot create hsr debugfs directory [ 1086.722165][T11460] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1038'. [ 1087.698739][ T13] bridge_slave_1: left allmulticast mode [ 1087.698779][ T13] bridge_slave_1: left promiscuous mode [ 1087.699082][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.774610][ T13] bridge_slave_0: left allmulticast mode [ 1087.774651][ T13] bridge_slave_0: left promiscuous mode [ 1087.775000][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.998534][ T13] bridge_slave_1: left allmulticast mode [ 1087.998566][ T13] bridge_slave_1: left promiscuous mode [ 1087.998808][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.081980][ T13] bridge_slave_0: left allmulticast mode [ 1088.082007][ T13] bridge_slave_0: left promiscuous mode [ 1088.082196][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.532931][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.651943][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.736690][ T13] bond0 (unregistering): Released all slaves [ 1089.194471][T11465] CUSE: info not properly terminated [ 1091.816082][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.936655][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.574472][T11468] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1040'. [ 1093.555585][ T13] bond0 (unregistering): Released all slaves [ 1093.613256][T11362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.614799][T11362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.615170][T11362] bridge_slave_0: entered allmulticast mode [ 1093.642388][T11362] bridge_slave_0: entered promiscuous mode [ 1093.721457][T11362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.721828][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.722194][T11362] bridge_slave_1: entered allmulticast mode [ 1093.726384][T11362] bridge_slave_1: entered promiscuous mode [ 1094.722402][T11362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.779209][T11362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.937370][ T13] hsr_slave_0: left promiscuous mode [ 1094.974131][ T13] hsr_slave_1: left promiscuous mode [ 1094.979098][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.024532][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.281124][ T13] hsr_slave_0: left promiscuous mode [ 1095.322605][ T13] hsr_slave_1: left promiscuous mode [ 1095.324105][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.344511][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.029126][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1096.091432][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1096.954299][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1097.043101][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1098.820067][T11362] team0: Port device team_slave_0 added [ 1099.280592][T11362] team0: Port device team_slave_1 added [ 1099.485032][T11504] CUSE: info not properly terminated [ 1100.517832][T11362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.517852][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.517883][T11362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.537692][T11362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.537711][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.537739][T11362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.765922][T11362] hsr_slave_0: entered promiscuous mode [ 1100.771673][T11362] hsr_slave_1: entered promiscuous mode [ 1103.770951][ T13] bridge_slave_1: left allmulticast mode [ 1103.770980][ T13] bridge_slave_1: left promiscuous mode [ 1103.771203][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.851918][ T13] bridge_slave_0: left allmulticast mode [ 1103.851944][ T13] bridge_slave_0: left promiscuous mode [ 1103.852175][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.121549][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.201778][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.262722][ T13] bond0 (unregistering): Released all slaves [ 1104.339872][T11282] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1104.439089][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.455580][T11282] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1104.532265][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.539748][T11282] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1104.622579][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.718300][T11282] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1104.755970][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1105.484265][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1105.489055][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1105.507875][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1105.511220][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1105.513615][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1105.680916][ T13] hsr_slave_0: left promiscuous mode [ 1105.720819][ T13] hsr_slave_1: left promiscuous mode [ 1105.722639][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.761763][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.171488][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1106.221425][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1107.651381][T11365] Bluetooth: hci2: command tx timeout [ 1108.327409][T11282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.567702][T11282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.608773][T11362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1108.647186][T11362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1108.667897][T11362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1109.731105][T11365] Bluetooth: hci2: command tx timeout [ 1109.880625][T11362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1109.938444][T11362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1110.003528][T11362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1110.021948][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.022139][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.032515][T11362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1110.113434][T11362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1110.684085][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.684218][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.085235][T11589] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1058'. [ 1112.811684][T11365] Bluetooth: hci2: command tx timeout [ 1115.682445][T11365] Bluetooth: hci2: command tx timeout [ 1116.405311][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.405438][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.654846][T11544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.656751][T11544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.657094][T11544] bridge_slave_0: entered allmulticast mode [ 1118.676078][T11544] bridge_slave_0: entered promiscuous mode [ 1118.727071][T11544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.727415][T11544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.727758][T11544] bridge_slave_1: entered allmulticast mode [ 1118.749716][T11544] bridge_slave_1: entered promiscuous mode [ 1119.853686][T11544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.906422][T11544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.564705][T11544] team0: Port device team_slave_0 added [ 1121.663802][T11544] team0: Port device team_slave_1 added [ 1122.982349][ T13] bridge_slave_1: left allmulticast mode [ 1122.982392][ T13] bridge_slave_1: left promiscuous mode [ 1122.982709][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.109552][ T13] bridge_slave_0: left allmulticast mode [ 1123.109579][ T13] bridge_slave_0: left promiscuous mode [ 1123.109789][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.452876][T11628] kvm_intel: kvm [11627]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x68ce [ 1123.773935][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1123.857152][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1123.864063][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1123.866568][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1123.867769][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1124.128212][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.241430][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.297158][ T13] bond0 (unregistering): Released all slaves [ 1126.482681][T11365] Bluetooth: hci4: command tx timeout [ 1127.100273][T11544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.100292][T11544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.100324][T11544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.143161][T11362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.155103][T11544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.155122][T11544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.155151][T11544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.421360][ T13] hsr_slave_0: left promiscuous mode [ 1127.492250][ T13] hsr_slave_1: left promiscuous mode [ 1127.493104][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.536524][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.106241][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1128.181465][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1128.501230][ T37] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1128.531551][T11365] Bluetooth: hci4: command tx timeout [ 1128.561150][T11544] hsr_slave_0: entered promiscuous mode [ 1128.563442][T11544] hsr_slave_1: entered promiscuous mode [ 1128.565611][T11544] debugfs: 'hsr0' already exists in 'hsr' [ 1128.565638][T11544] Cannot create hsr debugfs directory [ 1128.618681][T11362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.690580][ T37] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1128.690614][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.756142][ T37] usb 3-1: config 0 descriptor?? [ 1129.234632][T11658] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 1129.234656][T11658] netlink: 'syz.2.1071': attribute type 2 has an invalid length. [ 1129.295241][ T37] ath6kl: Failed to submit usb control message: -71 [ 1129.295321][ T37] ath6kl: unable to send the bmi data to the device: -71 [ 1129.295338][ T37] ath6kl: Unable to send get target info: -71 [ 1129.298958][ T37] ath6kl: Failed to init ath6kl core: -71 [ 1129.308707][ T37] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1129.318476][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.318686][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.429138][ T37] usb 3-1: USB disconnect, device number 53 [ 1129.557668][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.557869][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.953404][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1130.611525][T11365] Bluetooth: hci4: command tx timeout [ 1132.363770][T11689] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1132.363796][T11689] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1132.429210][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1132.492065][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1132.493908][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1132.503505][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1132.504665][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1132.692106][T11365] Bluetooth: hci4: command tx timeout [ 1133.200438][ T5617] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1133.920891][ T9857] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1134.077568][ T9857] usb 3-1: Using ep0 maxpacket: 32 [ 1134.080197][ T9857] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.080225][ T9857] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1134.123815][ T9857] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1134.123851][ T9857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.123874][ T9857] usb 3-1: Product: syz [ 1134.123890][ T9857] usb 3-1: Manufacturer: syz [ 1134.123905][ T9857] usb 3-1: SerialNumber: syz [ 1134.732306][ T5617] Bluetooth: hci0: command tx timeout [ 1136.770884][ T5617] Bluetooth: hci0: command tx timeout [ 1137.167781][ T5744] usb 3-1: USB disconnect, device number 54 [ 1137.209163][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.210015][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.210361][T11633] bridge_slave_0: entered allmulticast mode [ 1137.285222][T11633] bridge_slave_0: entered promiscuous mode [ 1137.324087][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.324440][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.324747][T11633] bridge_slave_1: entered allmulticast mode [ 1137.329815][T11633] bridge_slave_1: entered promiscuous mode [ 1138.859057][ T5617] Bluetooth: hci0: command tx timeout [ 1138.919066][T11633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.539862][T11633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.164578][ T5617] Bluetooth: hci0: command tx timeout [ 1141.587361][T11633] team0: Port device team_slave_0 added [ 1141.880405][T11633] team0: Port device team_slave_1 added [ 1142.401063][ T13] bridge_slave_1: left allmulticast mode [ 1142.401093][ T13] bridge_slave_1: left promiscuous mode [ 1142.427963][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.554044][ T13] bridge_slave_0: left allmulticast mode [ 1142.554087][ T13] bridge_slave_0: left promiscuous mode [ 1142.554393][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.501507][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.694547][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.756426][ T13] bond0 (unregistering): Released all slaves [ 1148.198058][T11819] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1089'. [ 1149.094696][T11817] ip6tnl2: entered allmulticast mode [ 1149.251280][T11633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.251301][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.251333][T11633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.254030][T11544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1149.503054][T11544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1149.667824][T11633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.667845][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.667876][T11633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.741115][T11544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1149.897330][T11544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1150.076339][T11544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1150.106724][T11544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1150.380907][ T13] hsr_slave_0: left promiscuous mode [ 1150.423037][ T13] hsr_slave_1: left promiscuous mode [ 1150.423884][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.493915][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.321413][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1155.491421][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1156.642886][T11544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1156.713014][T11544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.775662][T11633] hsr_slave_0: entered promiscuous mode [ 1157.777180][T11633] hsr_slave_1: entered promiscuous mode [ 1157.778408][T11633] debugfs: 'hsr0' already exists in 'hsr' [ 1157.778425][T11633] Cannot create hsr debugfs directory [ 1160.034737][T11688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.035127][T11688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.035457][T11688] bridge_slave_0: entered allmulticast mode [ 1160.039548][T11688] bridge_slave_0: entered promiscuous mode [ 1160.134750][T11688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.135187][T11688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.135559][T11688] bridge_slave_1: entered allmulticast mode [ 1160.139638][T11688] bridge_slave_1: entered promiscuous mode [ 1162.424744][T11688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.608313][T11688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.018039][T11688] team0: Port device team_slave_0 added [ 1163.107030][T11688] team0: Port device team_slave_1 added [ 1163.665536][T11688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.665549][T11688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.665567][T11688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.759901][T11688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.759914][T11688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.759932][T11688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.591179][ T37] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1164.676872][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1164.770945][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 1164.788532][ T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.788572][ T37] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1164.817345][ T37] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1164.817380][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.817401][ T37] usb 3-1: Product: syz [ 1164.817415][ T37] usb 3-1: Manufacturer: syz [ 1164.817431][ T37] usb 3-1: SerialNumber: syz [ 1165.096230][T11688] hsr_slave_0: entered promiscuous mode [ 1165.099645][T11688] hsr_slave_1: entered promiscuous mode [ 1165.149842][T11688] debugfs: 'hsr0' already exists in 'hsr' [ 1165.149880][T11688] Cannot create hsr debugfs directory [ 1167.280057][T11365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1168.306352][T11365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1168.308190][T11365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1168.324759][T11365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1168.325692][T11365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1168.582019][ T37] usb 3-1: USB disconnect, device number 55 [ 1170.090888][ T37] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1170.914384][T11932] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1108'. [ 1171.949815][ T5617] Bluetooth: hci2: command tx timeout [ 1171.960533][ T37] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1171.960569][ T37] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1171.960592][ T37] usb 3-1: Product: syz [ 1171.960609][ T37] usb 3-1: SerialNumber: syz [ 1171.992895][ T37] usb 3-1: config 0 descriptor?? [ 1172.309354][ T37] hso 3-1:0.0: Failed to find BULK eps [ 1172.437486][T11924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.438208][T11924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.493332][ T5744] usb 3-1: USB disconnect, device number 56 [ 1173.577487][T11947] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1173.577504][T11947] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1173.973859][ T5617] Bluetooth: hci2: command tx timeout [ 1174.172244][ T13] bridge_slave_1: left allmulticast mode [ 1174.172284][ T13] bridge_slave_1: left promiscuous mode [ 1174.174915][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.316948][ T13] bridge_slave_0: left allmulticast mode [ 1175.316990][ T13] bridge_slave_0: left promiscuous mode [ 1175.317302][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.366459][T11961] Bluetooth: MGMT ver 1.23 [ 1175.630466][T11965] CUSE: info not properly terminated [ 1176.051323][ T5617] Bluetooth: hci2: command tx timeout [ 1176.741665][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.821883][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.844079][ T13] bond0 (unregistering): Released all slaves [ 1178.864234][ T5617] Bluetooth: hci2: command tx timeout [ 1178.880610][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.897190][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.760919][ T13] hsr_slave_0: left promiscuous mode [ 1180.800862][ T13] hsr_slave_1: left promiscuous mode [ 1180.801630][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.845214][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.381459][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1181.401068][ T5752] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1181.451487][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1181.585205][ T5752] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1181.585234][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.628520][ T5752] usb 3-1: config 0 descriptor?? [ 1182.085255][ T5752] ath6kl: Failed to submit usb control message: -71 [ 1182.085308][ T5752] ath6kl: unable to send the bmi data to the device: -71 [ 1182.085324][ T5752] ath6kl: Unable to send get target info: -71 [ 1182.220095][ T5752] ath6kl: Failed to init ath6kl core: -71 [ 1182.235889][ T5752] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1182.328268][ T5752] usb 3-1: USB disconnect, device number 57 [ 1182.576144][T11902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.579432][T11902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.579786][T11902] bridge_slave_0: entered allmulticast mode [ 1182.595029][T11902] bridge_slave_0: entered promiscuous mode [ 1182.624636][T11902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.625090][T11902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.627678][T11902] bridge_slave_1: entered allmulticast mode [ 1182.636032][T11902] bridge_slave_1: entered promiscuous mode [ 1183.197978][T11902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.231993][T11902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.440315][T11902] team0: Port device team_slave_0 added [ 1183.458689][T11902] team0: Port device team_slave_1 added [ 1183.783682][T11902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.783703][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.783735][T11902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.793441][T11902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.793453][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.793472][T11902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.415354][T11902] hsr_slave_0: entered promiscuous mode [ 1185.434538][T11902] hsr_slave_1: entered promiscuous mode [ 1185.633323][ T5744] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1185.769889][T11365] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1185.859010][ T5744] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1185.859045][ T5744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.860538][T11365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1185.886951][T11365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1185.897520][ T5744] usb 3-1: config 0 descriptor?? [ 1185.921501][T11365] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1185.926038][T11365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1186.408833][ T5744] ath6kl: Failed to submit usb control message: -71 [ 1186.408903][ T5744] ath6kl: unable to send the bmi data to the device: -71 [ 1186.408921][ T5744] ath6kl: Unable to send get target info: -71 [ 1186.470139][ T5744] ath6kl: Failed to init ath6kl core: -71 [ 1186.472067][ T5744] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1186.498724][ T5744] usb 3-1: USB disconnect, device number 58 [ 1189.562760][T11365] Bluetooth: hci5: command tx timeout [ 1190.085253][T12061] loop9: detected capacity change from 0 to 7 [ 1190.109973][ T809] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1190.114758][T12061] Dev loop9: unable to read RDB block 7 [ 1190.114801][T12061] loop9: unable to read partition table [ 1190.115015][T12061] loop9: partition table beyond EOD, truncated [ 1190.115048][T12061] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1190.191188][T11989] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1191.470031][T11365] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1191.571182][T11365] Bluetooth: hci5: command tx timeout [ 1191.856473][T11688] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1191.911774][T11688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1191.940029][T11688] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1192.119672][T11688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1192.148957][T11688] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1192.186785][T11688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1192.577190][T11688] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1192.605657][T11688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1193.260963][ T13] bridge_slave_1: left allmulticast mode [ 1193.261005][ T13] bridge_slave_1: left promiscuous mode [ 1193.261321][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.376921][ T13] bridge_slave_0: left allmulticast mode [ 1193.376962][ T13] bridge_slave_0: left promiscuous mode [ 1193.377269][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.651381][T11365] Bluetooth: hci5: command tx timeout [ 1193.968809][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1194.016693][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1194.018191][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1194.019926][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1194.053828][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1194.191718][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.311801][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.394508][ T13] bond0 (unregistering): Released all slaves [ 1195.782598][T11365] Bluetooth: hci5: command tx timeout [ 1195.882560][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1195.995164][ T5617] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1196.211105][ T5617] Bluetooth: hci0: command tx timeout [ 1196.404442][ T13] hsr_slave_0: left promiscuous mode [ 1196.441065][ T13] hsr_slave_1: left promiscuous mode [ 1196.444368][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.161578][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.291032][ T5617] Bluetooth: hci0: command tx timeout [ 1199.254042][T12143] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1145'. [ 1200.370894][ T5617] Bluetooth: hci0: command tx timeout [ 1200.794687][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1200.887255][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1201.276931][T12149] loop9: detected capacity change from 0 to 7 [ 1201.308960][ T45] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1201.309286][T12149] Dev loop9: unable to read RDB block 7 [ 1201.309331][T12149] loop9: unable to read partition table [ 1201.309580][T12149] loop9: partition table beyond EOD, truncated [ 1201.309602][T12149] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1201.430071][T12147] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1201.926487][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.926917][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.927225][T12028] bridge_slave_0: entered allmulticast mode [ 1201.933307][T12028] bridge_slave_0: entered promiscuous mode [ 1202.128996][T12166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1149'. [ 1202.313342][T12028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.313820][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.314164][T12028] bridge_slave_1: entered allmulticast mode [ 1202.323179][T12028] bridge_slave_1: entered promiscuous mode [ 1202.460771][ T5617] Bluetooth: hci0: command tx timeout [ 1203.822285][T12187] capability: warning: `syz.2.1152' uses deprecated v2 capabilities in a way that may be insecure [ 1204.326510][T12028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.449443][T12028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.629392][T12028] team0: Port device team_slave_0 added [ 1204.692158][T12028] team0: Port device team_slave_1 added [ 1205.114335][T12028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.114350][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.114367][T12028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.183365][T12028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.183380][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.183398][T12028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.560853][ T37] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1206.608204][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1157'. [ 1206.780767][ T37] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1206.780802][ T37] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1206.780901][ T37] usb 3-1: Product: syz [ 1206.780918][ T37] usb 3-1: SerialNumber: syz [ 1206.792351][ T37] usb 3-1: config 0 descriptor?? [ 1207.154856][ T37] hso 3-1:0.0: Failed to find BULK eps [ 1207.357456][ T37] usb 3-1: USB disconnect, device number 59 [ 1207.537885][T12028] hsr_slave_0: entered promiscuous mode [ 1207.540360][T12028] hsr_slave_1: entered promiscuous mode [ 1207.545822][T12028] debugfs: 'hsr0' already exists in 'hsr' [ 1207.545851][T12028] Cannot create hsr debugfs directory [ 1211.553179][T11902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1211.635189][T11902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.745047][T11902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1211.776837][T11902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1212.134759][T11902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1212.291186][T12256] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1212.291265][T12256] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1212.997831][T11902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1213.439341][T12271] loop9: detected capacity change from 0 to 7 [ 1213.465500][ T1371] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1213.467228][T12271] Dev loop9: unable to read RDB block 7 [ 1213.467258][T12271] loop9: unable to read partition table [ 1213.467395][T12271] loop9: partition table beyond EOD, truncated [ 1213.467426][T12271] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1213.583559][T11902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1213.667613][T11902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1213.698146][T12107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.698593][T12107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.698912][T12107] bridge_slave_0: entered allmulticast mode [ 1213.724686][T12107] bridge_slave_0: entered promiscuous mode [ 1213.734811][T12269] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1214.801218][T12107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.801566][T12107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.801911][T12107] bridge_slave_1: entered allmulticast mode [ 1214.805991][T12107] bridge_slave_1: entered promiscuous mode [ 1215.100562][T12107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.158754][T12107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.751892][T12107] team0: Port device team_slave_0 added [ 1215.790222][T12107] team0: Port device team_slave_1 added [ 1216.289110][T12288] CUSE: info not properly terminated [ 1218.172776][T12107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.172796][T12107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.172828][T12107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.323879][T12107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.323893][T12107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.323911][T12107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.806340][T12107] hsr_slave_0: entered promiscuous mode [ 1220.815177][T12107] hsr_slave_1: entered promiscuous mode [ 1220.825656][T12107] debugfs: 'hsr0' already exists in 'hsr' [ 1220.825686][T12107] Cannot create hsr debugfs directory [ 1222.786919][T12323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1178'. [ 1223.709771][ T13] bridge_slave_1: left allmulticast mode [ 1223.709812][ T13] bridge_slave_1: left promiscuous mode [ 1223.710137][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.464403][ T13] bridge_slave_0: left allmulticast mode [ 1225.464432][ T13] bridge_slave_0: left promiscuous mode [ 1225.464645][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.671101][ T13] bridge_slave_1: left allmulticast mode [ 1225.671128][ T13] bridge_slave_1: left promiscuous mode [ 1225.671343][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.752686][ T13] bridge_slave_0: left allmulticast mode [ 1225.752726][ T13] bridge_slave_0: left promiscuous mode [ 1225.753029][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.172473][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.283797][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.352482][ T13] bond0 (unregistering): Released all slaves [ 1226.531565][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.613566][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.672605][ T13] bond0 (unregistering): Released all slaves [ 1226.910146][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1227.962374][ T13] hsr_slave_0: left promiscuous mode [ 1228.180812][ T13] hsr_slave_1: left promiscuous mode [ 1228.290438][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.428668][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.710805][ T13] hsr_slave_0: left promiscuous mode [ 1228.750822][ T13] hsr_slave_1: left promiscuous mode [ 1228.755707][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.809206][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.824113][T11365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1228.827422][T11365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1228.859426][T11365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1228.884390][T11365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1228.892963][T11365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1229.383753][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1229.431493][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1229.901717][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1229.961813][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1230.801554][T12028] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1230.955917][T12028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1231.014132][ T5617] Bluetooth: hci2: command tx timeout [ 1231.364494][T12028] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1231.397999][T12028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1231.414850][T12028] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1231.548807][T12028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1231.561966][T12028] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1231.687736][T12028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1231.922210][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1232.396968][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 1232.689581][T12388] Bluetooth: MGMT ver 1.23 [ 1233.118804][ T5617] Bluetooth: hci2: command tx timeout [ 1235.011625][T12421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'. [ 1235.109793][T12028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.171330][ T5617] Bluetooth: hci2: command tx timeout [ 1237.260788][ T5617] Bluetooth: hci2: command tx timeout [ 1238.095075][T12028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.099980][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.100406][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.121804][T12346] bridge_slave_0: entered allmulticast mode [ 1238.127430][T12346] bridge_slave_0: entered promiscuous mode [ 1238.167276][T12107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1238.182994][T12465] binder_alloc: 12464: binder_alloc_buf, no vma [ 1238.253564][T12107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1238.255349][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.255726][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.256041][T12346] bridge_slave_1: entered allmulticast mode [ 1238.259954][T12346] bridge_slave_1: entered promiscuous mode [ 1238.541096][T12107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1238.589524][T12107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1238.638730][T12107] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1238.665102][T12107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1238.675096][ T1371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.675362][ T1371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.701004][T12107] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1238.735960][T12107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1238.767411][T12346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.269174][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.269291][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.737695][T12346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.823719][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.823915][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.493827][T12346] team0: Port device team_slave_0 added [ 1242.538816][T12346] team0: Port device team_slave_1 added [ 1242.772637][T12346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.772659][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.772692][T12346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.843447][T12346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.843467][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.843499][T12346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.185384][T12346] hsr_slave_0: entered promiscuous mode [ 1243.188798][T12346] hsr_slave_1: entered promiscuous mode [ 1243.211058][T12346] debugfs: 'hsr0' already exists in 'hsr' [ 1243.211091][T12346] Cannot create hsr debugfs directory [ 1244.041108][ T13] bridge_slave_1: left allmulticast mode [ 1244.041149][ T13] bridge_slave_1: left promiscuous mode [ 1244.041485][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.112028][ T13] bridge_slave_0: left allmulticast mode [ 1245.112055][ T13] bridge_slave_0: left promiscuous mode [ 1245.112260][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.551467][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.653616][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.713505][ T13] bond0 (unregistering): Released all slaves [ 1246.311132][ T13] hsr_slave_0: left promiscuous mode [ 1246.351039][ T13] hsr_slave_1: left promiscuous mode [ 1246.353449][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.391591][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.979152][T11365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1247.009411][T11365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1247.018617][T11365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1247.026643][T11365] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1247.028717][T11365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1247.076276][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1247.267267][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1249.203018][T11365] Bluetooth: hci4: command tx timeout [ 1250.619700][T12107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.251237][T11365] Bluetooth: hci4: command tx timeout [ 1252.583193][T12107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.335550][T11365] Bluetooth: hci4: command tx timeout [ 1253.544689][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.546596][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.049775][ T809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.063885][ T809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.411960][T11365] Bluetooth: hci4: command tx timeout [ 1255.508059][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1255.549154][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1255.567302][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1255.586057][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1255.588060][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1257.327979][T12574] Bluetooth: MGMT ver 1.23 [ 1259.173478][T11365] Bluetooth: hci0: command tx timeout [ 1261.362961][T11365] Bluetooth: hci0: command tx timeout [ 1262.389786][T12346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1262.456084][T12346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1262.501731][T12346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1262.630976][T12346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1262.732518][T12346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1262.784103][T12346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1263.428272][T11365] Bluetooth: hci0: command tx timeout [ 1263.956639][T12346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1265.590237][T11365] Bluetooth: hci0: command tx timeout [ 1265.650098][T12346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1266.375789][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.376067][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.376261][T12506] bridge_slave_0: entered allmulticast mode [ 1266.381711][T12506] bridge_slave_0: entered promiscuous mode [ 1266.428496][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.428887][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.429221][T12506] bridge_slave_1: entered allmulticast mode [ 1266.443401][T12506] bridge_slave_1: entered promiscuous mode [ 1266.760904][ T13] bridge_slave_1: left allmulticast mode [ 1266.760948][ T13] bridge_slave_1: left promiscuous mode [ 1266.761419][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.465887][ T13] bridge_slave_0: left allmulticast mode [ 1268.465929][ T13] bridge_slave_0: left promiscuous mode [ 1268.466268][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.607582][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.682775][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.770890][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 1274.965407][ T13] bond0 (unregistering): Released all slaves [ 1275.022192][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.215991][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.385710][T12506] team0: Port device team_slave_0 added [ 1275.429809][T12506] team0: Port device team_slave_1 added [ 1275.680866][ T13] hsr_slave_0: left promiscuous mode [ 1275.722690][ T13] hsr_slave_1: left promiscuous mode [ 1275.724314][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.764795][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.960814][ T5744] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1276.331189][ T5744] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1276.331226][ T5744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.341616][ T5744] usb 3-1: config 0 descriptor?? [ 1277.403949][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1277.475446][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1280.007151][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1280.007165][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.007184][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.828292][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.828313][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.828344][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.451865][ T5744] ath6kl: Failed to submit usb control message: -71 [ 1282.451974][ T5744] ath6kl: unable to send the bmi data to the device: -71 [ 1282.452005][ T5744] ath6kl: Unable to send get target info: -71 [ 1282.477174][ T5744] ath6kl: Failed to init ath6kl core: -71 [ 1282.478208][ T5744] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1282.487234][ T5744] usb 3-1: USB disconnect, device number 60 [ 1283.560361][T12506] hsr_slave_0: entered promiscuous mode [ 1283.665299][T12506] hsr_slave_1: entered promiscuous mode [ 1284.446444][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.446892][T12560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.447334][T12560] bridge_slave_0: entered allmulticast mode [ 1284.463565][T12560] bridge_slave_0: entered promiscuous mode [ 1284.524777][T12560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.525145][T12560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.526447][T12560] bridge_slave_1: entered allmulticast mode [ 1284.539206][T12560] bridge_slave_1: entered promiscuous mode [ 1284.802602][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1284.827151][T12560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.877247][T12560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.047170][T12560] team0: Port device team_slave_0 added [ 1286.091795][T12560] team0: Port device team_slave_1 added [ 1286.144116][T12346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.303115][T12560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.303134][T12560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.303165][T12560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.370896][T12560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.370916][T12560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.370948][T12560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.569138][T12346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.663033][T12560] hsr_slave_0: entered promiscuous mode [ 1286.667320][T12560] hsr_slave_1: entered promiscuous mode [ 1286.682599][T12560] debugfs: 'hsr0' already exists in 'hsr' [ 1286.682633][T12560] Cannot create hsr debugfs directory [ 1287.509576][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.509798][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.073430][ T1524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.075269][ T1524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.097895][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1292.275100][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1292.390113][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1292.407912][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1292.409685][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1292.433308][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1294.907007][T12791] loop9: detected capacity change from 0 to 7 [ 1294.916748][ T68] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1294.922944][T12791] Dev loop9: unable to read RDB block 7 [ 1294.922994][T12791] loop9: unable to read partition table [ 1294.923238][T12791] loop9: partition table beyond EOD, truncated [ 1294.923259][T12791] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1295.245872][T12788] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1295.413392][ T5617] Bluetooth: hci2: command tx timeout [ 1297.493759][ T5617] Bluetooth: hci2: command tx timeout [ 1299.571003][ T5617] Bluetooth: hci2: command tx timeout [ 1301.370728][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.370857][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.650876][ T5617] Bluetooth: hci2: command tx timeout [ 1305.085164][T12842] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.085182][T12842] binder: 12841:12842 ioctl 4018620d 200000004a80 returned -16 [ 1305.232937][T12845] loop9: detected capacity change from 0 to 7 [ 1305.238731][ T6671] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1305.239047][T12845] Dev loop9: unable to read RDB block 7 [ 1305.239095][T12845] loop9: unable to read partition table [ 1305.239340][T12845] loop9: partition table beyond EOD, truncated [ 1305.239361][T12845] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1305.249819][T12844] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1305.332520][ T13] bridge_slave_1: left allmulticast mode [ 1305.332561][ T13] bridge_slave_1: left promiscuous mode [ 1305.332879][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.428805][ T13] bridge_slave_0: left allmulticast mode [ 1305.428845][ T13] bridge_slave_0: left promiscuous mode [ 1305.429164][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.993835][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.117621][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.207995][ T13] bond0 (unregistering): Released all slaves [ 1309.511221][ T13] hsr_slave_0: left promiscuous mode [ 1309.553946][ T13] hsr_slave_1: left promiscuous mode [ 1309.554997][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.593122][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.981634][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1314.031570][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1314.262678][T11365] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1314.442923][T11365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1314.444662][T11365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1314.468157][T11365] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1314.477320][T11365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1314.999605][ T5617] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1315.898401][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.898593][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.898784][T12781] bridge_slave_0: entered allmulticast mode [ 1315.972962][T12781] bridge_slave_0: entered promiscuous mode [ 1316.010215][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.010794][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.011108][T12781] bridge_slave_1: entered allmulticast mode [ 1316.026181][T12781] bridge_slave_1: entered promiscuous mode [ 1316.285911][T12781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.307963][T12781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.574010][T12781] team0: Port device team_slave_0 added [ 1316.602003][T12781] team0: Port device team_slave_1 added [ 1316.621495][ T5617] Bluetooth: hci5: command tx timeout [ 1316.954125][T12781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.954146][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.954177][T12781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.174172][T12781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.174185][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.174228][T12781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.695643][ T5617] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1317.928832][T11365] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1317.959324][T11365] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1317.968110][T11365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1317.985687][T11365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1317.999453][T11365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1318.702036][ T5617] Bluetooth: hci5: command tx timeout [ 1319.527829][T12781] hsr_slave_0: entered promiscuous mode [ 1319.542397][T12781] hsr_slave_1: entered promiscuous mode [ 1319.543668][T12781] debugfs: 'hsr0' already exists in 'hsr' [ 1319.543697][T12781] Cannot create hsr debugfs directory [ 1319.653262][T12954] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1320.291122][ T5617] Bluetooth: hci0: command tx timeout [ 1320.890884][ T5617] Bluetooth: hci5: command tx timeout [ 1323.321768][ T5617] Bluetooth: hci0: command tx timeout [ 1323.327418][ T5617] Bluetooth: hci5: command tx timeout [ 1325.410786][T11365] Bluetooth: hci0: command tx timeout [ 1325.947259][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.947641][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.947941][T12904] bridge_slave_0: entered allmulticast mode [ 1325.956942][T12904] bridge_slave_0: entered promiscuous mode [ 1325.993249][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.993620][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.993958][T12904] bridge_slave_1: entered allmulticast mode [ 1325.997054][T12904] bridge_slave_1: entered promiscuous mode [ 1326.124641][T12996] loop9: detected capacity change from 0 to 7 [ 1326.133516][ T68] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1327.595187][T11365] Bluetooth: hci0: command tx timeout [ 1327.616507][T12996] Dev loop9: unable to read RDB block 7 [ 1327.616559][T12996] loop9: unable to read partition table [ 1327.616798][T12996] loop9: partition table beyond EOD, truncated [ 1327.616818][T12996] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1327.716667][T12992] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1327.845279][T12904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.887947][T12904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.329971][T12904] team0: Port device team_slave_0 added [ 1328.366868][T12904] team0: Port device team_slave_1 added [ 1328.621109][ T13] bridge_slave_1: left allmulticast mode [ 1328.621152][ T13] bridge_slave_1: left promiscuous mode [ 1328.621465][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.723439][ T13] bridge_slave_0: left allmulticast mode [ 1330.723480][ T13] bridge_slave_0: left promiscuous mode [ 1330.723809][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.521522][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.621687][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.683562][ T13] bond0 (unregistering): Released all slaves [ 1331.971801][T12904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.971822][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.971854][T12904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.225956][T12904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.225971][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1332.225993][T12904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.542636][T11365] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1333.601055][ T13] hsr_slave_0: left promiscuous mode [ 1333.640949][ T13] hsr_slave_1: left promiscuous mode [ 1333.642198][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.681762][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.101777][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1334.161610][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1334.590999][T12904] hsr_slave_0: entered promiscuous mode [ 1334.595445][T12904] hsr_slave_1: entered promiscuous mode [ 1334.598837][T12904] debugfs: 'hsr0' already exists in 'hsr' [ 1334.598867][T12904] Cannot create hsr debugfs directory [ 1334.612348][T13035] binder: 13034:13035 ioctl c0306201 200000000240 returned -11 [ 1336.404454][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.404867][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.405175][T12932] bridge_slave_0: entered allmulticast mode [ 1336.408708][T12932] bridge_slave_0: entered promiscuous mode [ 1336.464888][ T823] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1336.485727][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.486019][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.486207][T12932] bridge_slave_1: entered allmulticast mode [ 1336.488520][T12932] bridge_slave_1: entered promiscuous mode [ 1336.650762][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 1336.652702][ T823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.652753][ T823] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1336.652769][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1336.655160][ T823] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1336.655189][ T823] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1336.655205][ T823] usb 3-1: Product: syz [ 1336.655214][ T823] usb 3-1: Manufacturer: syz [ 1336.655224][ T823] usb 3-1: SerialNumber: syz [ 1336.709956][ T823] usb 3-1: config 0 descriptor?? [ 1336.817086][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.851696][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.950393][ T823] rc_core: IR keymap rc-imon-rsc not found [ 1336.950410][ T823] Registered IR keymap rc-empty [ 1337.073348][ T823] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1337.095474][ T823] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 1337.431215][T12932] team0: Port device team_slave_0 added [ 1337.563685][T12932] team0: Port device team_slave_1 added [ 1337.577299][ T823] usb 3-1: USB disconnect, device number 61 [ 1337.904790][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.904812][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.904844][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.935654][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.935673][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.935706][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.989528][T12932] hsr_slave_0: entered promiscuous mode [ 1339.033865][T12932] hsr_slave_1: entered promiscuous mode [ 1339.036007][T12932] debugfs: 'hsr0' already exists in 'hsr' [ 1339.036036][T12932] Cannot create hsr debugfs directory [ 1339.137980][T11365] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 1339.195309][T12781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1339.238382][T12781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1341.966406][T12781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1342.058838][T12781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1342.717395][T12781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1342.837211][T12781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1342.935229][T12781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1342.968969][T12781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1344.366810][T13084] CUSE: info not properly terminated [ 1348.376826][T12781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.584942][T12781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.799549][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.801261][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.859777][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.863192][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.271411][ T13] bridge_slave_1: left allmulticast mode [ 1351.271454][ T13] bridge_slave_1: left promiscuous mode [ 1351.273420][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.292040][T11365] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 1351.367147][ T13] bridge_slave_0: left allmulticast mode [ 1351.367188][ T13] bridge_slave_0: left promiscuous mode [ 1351.367516][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.540897][ T13] bridge_slave_1: left allmulticast mode [ 1353.540939][ T13] bridge_slave_1: left promiscuous mode [ 1353.541240][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.622612][ T13] bridge_slave_0: left allmulticast mode [ 1353.622654][ T13] bridge_slave_0: left promiscuous mode [ 1353.622967][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.031887][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.151773][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.847653][ T13] bond0 (unregistering): Released all slaves [ 1357.943379][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.007061][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1358.030047][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1358.062961][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1358.064279][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1358.065524][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1358.235798][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.328012][ T13] bond0 (unregistering): Released all slaves [ 1358.425505][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1361.113867][ T5617] Bluetooth: hci4: command tx timeout [ 1361.817065][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.817212][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.953958][ T13] hsr_slave_0: left promiscuous mode [ 1361.968559][T13152] loop9: detected capacity change from 0 to 7 [ 1361.976935][ T1508] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1361.977267][T13152] Dev loop9: unable to read RDB block 7 [ 1361.977313][T13152] loop9: unable to read partition table [ 1361.977567][T13152] loop9: partition table beyond EOD, truncated [ 1361.977616][T13152] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1361.994161][ T13] hsr_slave_1: left promiscuous mode [ 1362.004014][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.031658][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.230841][ T13] hsr_slave_0: left promiscuous mode [ 1362.270749][ T13] hsr_slave_1: left promiscuous mode [ 1362.271743][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.313081][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.718207][T13149] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1362.732895][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1362.791520][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1363.112055][ T5617] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 1363.171119][ T5617] Bluetooth: hci4: command tx timeout [ 1363.943296][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1363.993853][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1366.202023][ T5617] Bluetooth: hci4: command tx timeout [ 1368.243277][T11365] Bluetooth: hci4: command tx timeout [ 1372.663726][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1372.765267][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1372.784246][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1372.791011][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1372.808801][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1373.442482][T13132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.442949][T13132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.443262][T13132] bridge_slave_0: entered allmulticast mode [ 1373.461742][T13132] bridge_slave_0: entered promiscuous mode [ 1373.487634][T13132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.488006][T13132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.498388][T13132] bridge_slave_1: entered allmulticast mode [ 1373.523511][T13132] bridge_slave_1: entered promiscuous mode [ 1373.920873][T13132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.158124][T13132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.924195][ T5617] Bluetooth: hci2: command tx timeout [ 1377.492166][T13132] team0: Port device team_slave_0 added [ 1377.545132][T13132] team0: Port device team_slave_1 added [ 1378.930762][ T5617] Bluetooth: hci2: command tx timeout [ 1382.320658][ T5617] Bluetooth: hci2: command tx timeout [ 1382.510392][T13132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.510412][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.510443][T13132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.538548][T13132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.538568][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.538596][T13132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.756360][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1382.815570][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1382.843234][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1382.934962][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1382.936024][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1384.370948][ T5617] Bluetooth: hci2: command tx timeout [ 1384.409870][T13132] hsr_slave_0: entered promiscuous mode [ 1384.414347][T13132] hsr_slave_1: entered promiscuous mode [ 1385.012914][ T5617] Bluetooth: hci5: command tx timeout [ 1385.347510][T13312] binder_alloc: 13311: binder_alloc_buf, no vma [ 1385.348038][T13312] binder: 13311:13312 ioctl c0306201 200000000240 returned -11 [ 1387.247764][ T5617] Bluetooth: hci5: command tx timeout [ 1388.500976][ T13] bridge_slave_1: left allmulticast mode [ 1388.501018][ T13] bridge_slave_1: left promiscuous mode [ 1388.501327][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.582969][ T13] bridge_slave_0: left allmulticast mode [ 1388.583013][ T13] bridge_slave_0: left promiscuous mode [ 1388.583485][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.814558][T13332] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1390.576759][ T5617] Bluetooth: hci5: command tx timeout [ 1391.791558][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.851474][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.894421][ T13] bond0 (unregistering): Released all slaves [ 1392.133635][T13347] binder_alloc: 13346: binder_alloc_buf, no vma [ 1392.134222][T13347] binder: 13346:13347 ioctl c0306201 200000000240 returned -11 [ 1393.479639][ T5617] Bluetooth: hci5: command tx timeout [ 1394.207393][T13205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.207817][T13205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.208152][T13205] bridge_slave_0: entered allmulticast mode [ 1394.246172][T13205] bridge_slave_0: entered promiscuous mode [ 1394.450849][ T13] hsr_slave_0: left promiscuous mode [ 1394.492168][ T13] hsr_slave_1: left promiscuous mode [ 1394.492949][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.532023][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.221476][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1396.271646][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1396.472494][T13205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.472757][T13205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.473002][T13205] bridge_slave_1: entered allmulticast mode [ 1396.475341][T13205] bridge_slave_1: entered promiscuous mode [ 1396.791139][T13368] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1396.844070][T13371] netlink: 'syz.4.1350': attribute type 1 has an invalid length. [ 1396.898311][T13205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.965188][T13205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.989107][ T38] audit: type=1400 audit(1778505630.572:7): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13370 comm="syz.4.1350" [ 1397.398716][T13205] team0: Port device team_slave_0 added [ 1397.425981][T13205] team0: Port device team_slave_1 added [ 1398.848424][T13205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.848439][T13205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.848458][T13205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.907197][T13205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.907218][T13205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.907248][T13205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.863043][T13205] hsr_slave_0: entered promiscuous mode [ 1399.865524][T13205] hsr_slave_1: entered promiscuous mode [ 1399.867538][T13205] debugfs: 'hsr0' already exists in 'hsr' [ 1399.867566][T13205] Cannot create hsr debugfs directory [ 1400.323183][T13275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.323549][T13275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.323867][T13275] bridge_slave_0: entered allmulticast mode [ 1400.337148][T13275] bridge_slave_0: entered promiscuous mode [ 1401.031123][T13275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.031469][T13275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.031889][T13275] bridge_slave_1: entered allmulticast mode [ 1401.076508][T13275] bridge_slave_1: entered promiscuous mode [ 1403.117993][T13275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.230897][T13275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.541855][T13275] team0: Port device team_slave_0 added [ 1403.578715][T13275] team0: Port device team_slave_1 added [ 1403.579942][T13415] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 1403.695547][T13132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1404.822494][T13132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1405.219373][T13132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1405.246488][T13132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1405.333773][T13132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1405.377348][T13132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1405.382619][T13275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.382639][T13275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.382667][T13275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.548483][T13132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1405.674500][T13132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1405.683638][T13275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.683656][T13275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.683715][T13275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.225040][T13441] random: crng reseeded on system resumption [ 1409.229192][T13275] hsr_slave_0: entered promiscuous mode [ 1409.241855][T13275] hsr_slave_1: entered promiscuous mode [ 1409.247458][T13275] debugfs: 'hsr0' already exists in 'hsr' [ 1409.247489][T13275] Cannot create hsr debugfs directory [ 1412.122713][T13468] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 1412.702446][ T13] bridge_slave_1: left allmulticast mode [ 1412.702489][ T13] bridge_slave_1: left promiscuous mode [ 1412.702806][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.820851][ T13] bridge_slave_0: left allmulticast mode [ 1412.820895][ T13] bridge_slave_0: left promiscuous mode [ 1412.821214][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.630815][ T13] bridge_slave_1: left allmulticast mode [ 1414.630868][ T13] bridge_slave_1: left promiscuous mode [ 1414.631194][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.236711][ T13] bridge_slave_0: left allmulticast mode [ 1416.236778][ T13] bridge_slave_0: left promiscuous mode [ 1416.237097][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.041742][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.164707][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.247074][ T13] bond0 (unregistering): Released all slaves [ 1420.401319][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.515670][T11365] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1420.519658][T11365] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1420.529929][T11365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1420.532528][T11365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1420.535159][T11365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1420.570363][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.696476][ T13] bond0 (unregistering): Released all slaves [ 1422.295906][ T13] hsr_slave_0: left promiscuous mode [ 1422.322807][ T13] hsr_slave_1: left promiscuous mode [ 1422.324012][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.361775][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.102740][ T5617] Bluetooth: hci0: command tx timeout [ 1424.108027][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.108148][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.600783][ T13] hsr_slave_0: left promiscuous mode [ 1424.640761][ T13] hsr_slave_1: left promiscuous mode [ 1424.642046][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.711960][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.130690][ T5617] Bluetooth: hci0: command tx timeout [ 1426.371373][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1426.422569][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1426.432148][T12654] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1426.620856][T12654] usb 3-1: Using ep0 maxpacket: 16 [ 1426.623552][T12654] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1426.623581][T12654] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.623603][T12654] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1426.626797][T12654] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1426.626828][T12654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.626851][T12654] usb 3-1: Product: syz [ 1426.626868][T12654] usb 3-1: Manufacturer: syz [ 1426.626885][T12654] usb 3-1: SerialNumber: syz [ 1426.731360][T12654] usb 3-1: 0:2 : does not exist [ 1427.033559][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1427.101499][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1427.338312][T12654] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1427.425751][T12654] usb 3-1: USB disconnect, device number 62 [ 1427.586600][T13497] udevd[13497]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1427.793917][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1428.004514][T13543] binder: 13542:13543 ioctl 4018620d 0 returned -22 [ 1428.259542][ T5617] Bluetooth: hci0: command tx timeout [ 1428.321827][T13205] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1428.432710][T13205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1428.458928][T13205] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1428.533892][T13205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1428.625365][T13205] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1428.662072][T13205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1428.709861][T13205] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1428.781115][T13205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1429.144261][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 1430.758791][ T5617] Bluetooth: hci0: command tx timeout [ 1434.455749][T13495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.456101][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.456438][T13495] bridge_slave_0: entered allmulticast mode [ 1434.541637][T13495] bridge_slave_0: entered promiscuous mode [ 1434.565868][T13495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.566208][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.566556][T13495] bridge_slave_1: entered allmulticast mode [ 1434.570446][T13495] bridge_slave_1: entered promiscuous mode [ 1434.817994][T11365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1434.836829][T11365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1434.843933][T11365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1434.874721][T11365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1434.875770][T11365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1436.133059][T13630] binder: 13629:13630 ioctl 4018620d 0 returned -22 [ 1437.521272][T11365] Bluetooth: hci2: command tx timeout [ 1437.827565][T13495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.868188][T13495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.406527][T13495] team0: Port device team_slave_0 added [ 1438.422716][T13495] team0: Port device team_slave_1 added [ 1438.596408][T13646] loop9: detected capacity change from 0 to 7 [ 1438.599150][ T68] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1438.599425][T13646] Dev loop9: unable to read RDB block 7 [ 1438.599469][T13646] loop9: unable to read partition table [ 1438.599674][T13646] loop9: partition table beyond EOD, truncated [ 1438.599692][T13646] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1438.603073][T13645] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1439.167250][T13495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.167264][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.167282][T13495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.227043][T13495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.227057][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.227076][T13495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.020673][T11365] Bluetooth: hci2: command tx timeout [ 1442.369791][T13495] hsr_slave_0: entered promiscuous mode [ 1442.374622][T13495] hsr_slave_1: entered promiscuous mode [ 1442.376698][T13495] debugfs: 'hsr0' already exists in 'hsr' [ 1442.376725][T13495] Cannot create hsr debugfs directory [ 1443.948704][T11365] Bluetooth: hci2: command tx timeout [ 1444.123587][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1444.194317][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1444.230449][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1444.248009][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1444.248971][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1445.384446][T13697] loop9: detected capacity change from 0 to 7 [ 1445.388475][ T1508] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1445.408727][T13697] Dev loop9: unable to read RDB block 7 [ 1445.408777][T13697] loop9: unable to read partition table [ 1445.409038][T13697] loop9: partition table beyond EOD, truncated [ 1445.428567][T13697] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1445.541467][T13497] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1445.970908][ T5617] Bluetooth: hci2: command tx timeout [ 1446.290777][ T5617] Bluetooth: hci4: command tx timeout [ 1447.290480][T13716] binder: BINDER_SET_CONTEXT_MGR already set [ 1447.290498][T13716] binder: 13715:13716 ioctl 4018620d 200000000040 returned -16 [ 1447.291408][T13716] binder: 13715:13716 ioctl c0306201 200000000240 returned -11 [ 1448.099356][T13723] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1448.375772][ T5617] Bluetooth: hci4: command tx timeout [ 1448.698737][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1448.879873][T13617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.883016][T13617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.883376][T13617] bridge_slave_0: entered allmulticast mode [ 1448.898530][T13617] bridge_slave_0: entered promiscuous mode [ 1448.910383][T13617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.911845][T13617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.912182][T13617] bridge_slave_1: entered allmulticast mode [ 1448.916025][T13617] bridge_slave_1: entered promiscuous mode [ 1449.784836][T13759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1415'. [ 1450.668894][ T5617] Bluetooth: hci4: command tx timeout [ 1451.041374][T13763] binder: BINDER_SET_CONTEXT_MGR already set [ 1451.041392][T13763] binder: 13762:13763 ioctl 4018620d 200000000040 returned -16 [ 1451.042107][T13763] binder: 13762:13763 ioctl c0306201 200000000240 returned -11 [ 1451.289514][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 1451.324009][T13617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.447129][T13617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.903866][T13617] team0: Port device team_slave_0 added [ 1452.052461][ T13] bridge_slave_1: left allmulticast mode [ 1452.052503][ T13] bridge_slave_1: left promiscuous mode [ 1452.052843][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.137682][ T13] bridge_slave_0: left allmulticast mode [ 1452.137722][ T13] bridge_slave_0: left promiscuous mode [ 1452.139126][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.205445][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 1452.330792][ T13] bridge_slave_1: left allmulticast mode [ 1452.330832][ T13] bridge_slave_1: left promiscuous mode [ 1452.331126][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.412678][ T13] bridge_slave_0: left allmulticast mode [ 1452.412738][ T13] bridge_slave_0: left promiscuous mode [ 1452.413048][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.697041][ T5617] Bluetooth: hci4: command tx timeout [ 1452.982612][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.061357][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.123356][ T13] bond0 (unregistering): Released all slaves [ 1454.079018][T13797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1423'. [ 1455.063342][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.163863][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.252494][ T13] bond0 (unregistering): Released all slaves [ 1455.335836][T13617] team0: Port device team_slave_1 added [ 1455.559786][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1455.729265][T13617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1455.729285][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.729315][T13617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.782956][T13617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.782976][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.783008][T13617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.884428][T13802] binder: BINDER_SET_CONTEXT_MGR already set [ 1455.884445][T13802] binder: 13801:13802 ioctl 4018620d 200000000040 returned -16 [ 1455.894516][T13802] binder: 13801:13802 ioctl c0306201 200000000240 returned -11 [ 1456.780922][ T13] hsr_slave_0: left promiscuous mode [ 1456.820885][ T13] hsr_slave_1: left promiscuous mode [ 1456.822284][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.863580][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.060721][ T13] hsr_slave_0: left promiscuous mode [ 1457.104577][ T13] hsr_slave_1: left promiscuous mode [ 1457.106130][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.124313][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.046337][T13837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1431'. [ 1460.068106][T13837] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1431'. [ 1461.072135][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1461.111720][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1461.531368][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1461.583748][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1461.995594][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1462.111004][T13617] hsr_slave_0: entered promiscuous mode [ 1462.113688][T13617] hsr_slave_1: entered promiscuous mode [ 1462.386176][T13495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1462.390376][T13845] binder: 13844:13845 ioctl c0306201 0 returned -14 [ 1462.407848][T13845] binder: 13844:13845 ioctl c0306201 200000000240 returned -11 [ 1462.483691][T13495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1462.484983][T13682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.485339][T13682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.485668][T13682] bridge_slave_0: entered allmulticast mode [ 1462.489544][T13682] bridge_slave_0: entered promiscuous mode [ 1462.538331][T13682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.538682][T13682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.539005][T13682] bridge_slave_1: entered allmulticast mode [ 1462.562264][T13682] bridge_slave_1: entered promiscuous mode [ 1462.607924][T13495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1462.719210][T13495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1462.837355][T13495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1462.880896][T13495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1462.967231][T13495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1463.026874][T13495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1463.124977][T13682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1463.307462][T13682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.503799][T13682] team0: Port device team_slave_0 added [ 1463.636951][T13682] team0: Port device team_slave_1 added [ 1465.880782][T13682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1465.880802][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1465.880844][T13682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.709950][T13874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1439'. [ 1466.731008][T13874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1439'. [ 1467.559558][T13682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.559577][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1467.559608][T13682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.663274][T13682] hsr_slave_0: entered promiscuous mode [ 1468.665868][T13682] hsr_slave_1: entered promiscuous mode [ 1468.668054][T13682] debugfs: 'hsr0' already exists in 'hsr' [ 1468.668083][T13682] Cannot create hsr debugfs directory [ 1472.620331][T13495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.298612][T13495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.464438][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.466228][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.547941][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.548143][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1475.621430][T13942] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1478.463574][ T13] bridge_slave_1: left allmulticast mode [ 1478.463603][ T13] bridge_slave_1: left promiscuous mode [ 1478.463819][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.562626][ T13] bridge_slave_0: left allmulticast mode [ 1478.562667][ T13] bridge_slave_0: left promiscuous mode [ 1478.563007][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.122367][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.246269][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.326775][ T13] bond0 (unregistering): Released all slaves [ 1480.171497][ T13] hsr_slave_0: left promiscuous mode [ 1480.211199][ T13] hsr_slave_1: left promiscuous mode [ 1480.212479][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.264151][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.876190][T11365] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1481.887519][T11365] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1483.469468][T11365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1483.473544][T11365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1483.478793][T11365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1483.807690][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1483.861662][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1484.557418][T14023] binder: 14021:14023 ioctl c0306201 200000000240 returned -11 [ 1484.697755][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.697877][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.571035][ T5617] Bluetooth: hci0: command tx timeout [ 1487.660680][ T5617] Bluetooth: hci0: command tx timeout [ 1487.861258][T14049] ================================================================== [ 1487.861278][T14049] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 1487.861311][T14049] Read of size 1 at addr ffff888032bc8418 by task syz.4.1465/14049 [ 1487.861331][T14049] [ 1487.861349][T14049] CPU: 0 UID: 0 PID: 14049 Comm: syz.4.1465 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1487.861381][T14049] Tainted: [L]=SOFTLOCKUP [ 1487.861388][T14049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1487.861408][T14049] Call Trace: [ 1487.861417][T14049] [ 1487.861427][T14049] dump_stack_lvl+0xe8/0x150 [ 1487.861458][T14049] print_address_description+0x55/0x1e0 [ 1487.861487][T14049] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1487.861510][T14049] print_report+0x58/0x70 [ 1487.861536][T14049] kasan_report+0x117/0x150 [ 1487.861572][T14049] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1487.861602][T14049] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1487.861635][T14049] __kasan_check_byte+0x2a/0x40 [ 1487.861668][T14049] lock_acquire+0x84/0x350 [ 1487.861693][T14049] ? preempt_schedule_thunk+0x16/0x40 [ 1487.861718][T14049] ? rcu_is_watching+0x15/0xb0 [ 1487.861748][T14049] _raw_spin_lock_irqsave+0x40/0x60 [ 1487.861772][T14049] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1487.861806][T14049] rt_mutex_slowunlock+0xbf/0x8b0 [ 1487.861841][T14049] ? reacquire_held_locks+0x104/0x190 [ 1487.861870][T14049] ? rt_spin_lock+0x1e0/0x400 [ 1487.861905][T14049] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1487.861940][T14049] ? rt_spin_unlock+0x14f/0x200 [ 1487.861975][T14049] ? rt_spin_unlock+0x160/0x200 [ 1487.862011][T14049] kbd_event+0x2f91/0x42f0 [ 1487.862059][T14049] ? __pfx_kbd_event+0x10/0x10 [ 1487.862093][T14049] ? try_to_take_rt_mutex+0x840/0xb00 [ 1487.862122][T14049] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1487.862150][T14049] ? __lock_acquire+0x6b5/0x2d10 [ 1487.862182][T14049] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1487.862223][T14049] ? input_pass_values+0x8d/0x890 [ 1487.862256][T14049] input_handle_events_default+0xd4/0x1a0 [ 1487.862291][T14049] ? input_pass_values+0x8d/0x890 [ 1487.862316][T14049] input_pass_values+0x288/0x890 [ 1487.862346][T14049] ? input_handle_event+0x70c/0xf30 [ 1487.862385][T14049] input_event_dispose+0x330/0x6b0 [ 1487.862424][T14049] input_inject_event+0x1d7/0x320 [ 1487.862460][T14049] ? input_inject_event+0xb0/0x320 [ 1487.862497][T14049] evdev_write+0x328/0x4c0 [ 1487.862526][T14049] ? __lock_acquire+0x6b5/0x2d10 [ 1487.862552][T14049] ? __pfx_evdev_write+0x10/0x10 [ 1487.862584][T14049] ? rw_verify_area+0x25b/0x4e0 [ 1487.862617][T14049] ? __pfx_evdev_write+0x10/0x10 [ 1487.862647][T14049] vfs_write+0x2a3/0xba0 [ 1487.862684][T14049] ? __pfx_vfs_write+0x10/0x10 [ 1487.862718][T14049] ? __fget_files+0x2a/0x420 [ 1487.862750][T14049] ? __fget_files+0x2a/0x420 [ 1487.862776][T14049] ? __fget_files+0x3a6/0x420 [ 1487.862824][T14049] ? __fget_files+0x2a/0x420 [ 1487.862857][T14049] ksys_write+0x156/0x270 [ 1487.862893][T14049] ? __pfx_ksys_write+0x10/0x10 [ 1487.862932][T14049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.862955][T14049] do_syscall_64+0x15f/0xf80 [ 1487.862984][T14049] ? clear_bhb_loop+0x40/0x90 [ 1487.863011][T14049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.863040][T14049] RIP: 0033:0x7f03fe4fcdd9 [ 1487.863062][T14049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.863082][T14049] RSP: 002b:00007f03fc72d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1487.863107][T14049] RAX: ffffffffffffffda RBX: 00007f03fe776090 RCX: 00007f03fe4fcdd9 [ 1487.863125][T14049] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000007 [ 1487.863141][T14049] RBP: 00007f03fe592d69 R08: 0000000000000000 R09: 0000000000000000 [ 1487.863155][T14049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1487.863170][T14049] R13: 00007f03fe776128 R14: 00007f03fe776090 R15: 00007fff3d66f0e8 [ 1487.863194][T14049] [ 1487.863202][T14049] [ 1487.863207][T14049] Allocated by task 14048: [ 1487.863218][T14049] kasan_save_track+0x3e/0x80 [ 1487.863243][T14049] __kasan_kmalloc+0x93/0xb0 [ 1487.863269][T14049] __kmalloc_cache_noprof+0x3a6/0x690 [ 1487.863296][T14049] alloc_tty_struct+0xa6/0x7b0 [ 1487.863320][T14049] tty_init_dev+0x59/0x4d0 [ 1487.863343][T14049] tty_open+0x86e/0xd80 [ 1487.863360][T14049] chrdev_open+0x4d0/0x5f0 [ 1487.863378][T14049] do_dentry_open+0x83d/0x13e0 [ 1487.863398][T14049] vfs_open+0x3b/0x350 [ 1487.863418][T14049] path_openat+0x2e43/0x38a0 [ 1487.863444][T14049] do_file_open+0x23e/0x4a0 [ 1487.863470][T14049] do_sys_openat2+0x113/0x200 [ 1487.863491][T14049] __x64_sys_openat+0x138/0x170 [ 1487.863513][T14049] do_syscall_64+0x15f/0xf80 [ 1487.863535][T14049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.863554][T14049] [ 1487.863560][T14049] Freed by task 12654: [ 1487.863570][T14049] kasan_save_track+0x3e/0x80 [ 1487.863594][T14049] kasan_save_free_info+0x46/0x50 [ 1487.863615][T14049] __kasan_slab_free+0x5c/0x80 [ 1487.863640][T14049] kfree+0x1c5/0x6c0 [ 1487.863662][T14049] process_one_work+0x98b/0x1630 [ 1487.863687][T14049] worker_thread+0xb49/0x1140 [ 1487.863712][T14049] kthread+0x388/0x470 [ 1487.863729][T14049] ret_from_fork+0x514/0xb70 [ 1487.863751][T14049] ret_from_fork_asm+0x1a/0x30 [ 1487.863778][T14049] [ 1487.863783][T14049] Last potentially related work creation: [ 1487.863793][T14049] kasan_save_stack+0x3e/0x60 [ 1487.863817][T14049] kasan_record_aux_stack+0xbd/0xd0 [ 1487.863836][T14049] insert_work+0x3d/0x330 [ 1487.863858][T14049] __queue_work+0xcfd/0x1010 [ 1487.863885][T14049] queue_work_on+0x106/0x1d0 [ 1487.863909][T14049] tty_release_struct+0xb8/0xd0 [ 1487.863934][T14049] tty_release+0xcb6/0x1710 [ 1487.863958][T14049] __fput+0x461/0xa70 [ 1487.863978][T14049] task_work_run+0x1d9/0x270 [ 1487.863998][T14049] exit_to_user_mode_loop+0xf3/0x4d0 [ 1487.864030][T14049] do_syscall_64+0x33e/0xf80 [ 1487.864051][T14049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.864071][T14049] [ 1487.864077][T14049] The buggy address belongs to the object at ffff888032bc8000 [ 1487.864077][T14049] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1487.864097][T14049] The buggy address is located 1048 bytes inside of [ 1487.864097][T14049] freed 2048-byte region [ffff888032bc8000, ffff888032bc8800) [ 1487.864121][T14049] [ 1487.864128][T14049] The buggy address belongs to the physical page: [ 1487.864140][T14049] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32bc8 [ 1487.864160][T14049] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1487.864176][T14049] memcg:ffff88805c8bb001 [ 1487.864185][T14049] flags: 0x80000000000040(head|node=0|zone=1) [ 1487.864203][T14049] page_type: f5(slab) [ 1487.864221][T14049] raw: 0080000000000040 ffff88813fe2f3c0 dead000000000100 dead000000000122 [ 1487.864241][T14049] raw: 0000000000000000 0000000800080008 00000000f5000000 ffff88805c8bb001 [ 1487.864259][T14049] head: 0080000000000040 ffff88813fe2f3c0 dead000000000100 dead000000000122 [ 1487.864278][T14049] head: 0000000000000000 0000000800080008 00000000f5000000 ffff88805c8bb001 [ 1487.864297][T14049] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1487.864316][T14049] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1487.864327][T14049] page dumped because: kasan: bad access detected [ 1487.864336][T14049] page_owner tracks the page as allocated [ 1487.864345][T14049] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5615, tgid 5615 (syz-executor), ts 94502949015, free_ts 70243482031 [ 1487.864382][T14049] post_alloc_hook+0x1f9/0x250 [ 1487.864410][T14049] get_page_from_freelist+0x27d6/0x2850 [ 1487.864429][T14049] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1487.864447][T14049] allocate_slab+0x74/0x5e0 [ 1487.864467][T14049] refill_objects+0x33c/0x3d0 [ 1487.864487][T14049] __pcs_replace_empty_main+0x373/0x720 [ 1487.864509][T14049] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 1487.864539][T14049] kmemdup_noprof+0x2b/0x70 [ 1487.864560][T14049] neigh_sysctl_register+0xae/0xa90 [ 1487.864579][T14049] addrconf_sysctl_register+0xb3/0x1c0 [ 1487.864608][T14049] ipv6_add_dev+0xd82/0x1410 [ 1487.864629][T14049] addrconf_notify+0x771/0x1050 [ 1487.864655][T14049] notifier_call_chain+0x1ad/0x3d0 [ 1487.864674][T14049] register_netdevice+0x1919/0x1f10 [ 1487.864696][T14049] macvlan_common_newlink+0x12af/0x1a40 [ 1487.864720][T14049] rtnl_newlink_create+0x329/0xb70 [ 1487.864741][T14049] page last free pid 5460 tgid 5460 stack trace: [ 1487.864753][T14049] __free_frozen_pages+0x1075/0x11b0 [ 1487.864780][T14049] __slab_free+0x252/0x2a0 [ 1487.864806][T14049] qlist_free_all+0x99/0x100 [ 1487.864829][T14049] kasan_quarantine_reduce+0x148/0x160 [ 1487.864852][T14049] __kasan_slab_alloc+0x22/0x80 [ 1487.864877][T14049] kmem_cache_alloc_noprof+0x33b/0x680 [ 1487.864902][T14049] vm_area_dup+0x2b/0x670 [ 1487.864919][T14049] __split_vma+0x1e4/0xa30 [ 1487.864941][T14049] vms_gather_munmap_vmas+0x32d/0x1380 [ 1487.864960][T14049] mmap_region+0x945/0x2280 [ 1487.864980][T14049] do_mmap+0xc2f/0x10c0 [ 1487.865004][T14049] vm_mmap_pgoff+0x2cc/0x4f0 [ 1487.865036][T14049] ksys_mmap_pgoff+0x4e8/0x720 [ 1487.865061][T14049] do_syscall_64+0x15f/0xf80 [ 1487.865082][T14049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.865102][T14049] [ 1487.865108][T14049] Memory state around the buggy address: [ 1487.865121][T14049] ffff888032bc8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1487.865135][T14049] ffff888032bc8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1487.865150][T14049] >ffff888032bc8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1487.865160][T14049] ^ [ 1487.865173][T14049] ffff888032bc8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1487.865187][T14049] ffff888032bc8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1487.865198][T14049] ================================================================== [ 1487.865213][T14049] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1487.865234][T14049] CPU: 0 UID: 0 PID: 14049 Comm: syz.4.1465 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1487.865263][T14049] Tainted: [L]=SOFTLOCKUP [ 1487.865272][T14049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1487.865284][T14049] Call Trace: [ 1487.865293][T14049] [ 1487.865302][T14049] vpanic+0x56c/0xa60 [ 1487.865332][T14049] ? __pfx_vpanic+0x10/0x10 [ 1487.865363][T14049] panic+0xc5/0xd0 [ 1487.865389][T14049] ? __pfx_panic+0x10/0x10 [ 1487.865419][T14049] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1487.865441][T14049] ? rcu_is_watching+0x15/0xb0 [ 1487.865465][T14049] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1487.865488][T14049] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1487.865509][T14049] check_panic_on_warn+0x89/0xb0 [ 1487.865532][T14049] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1487.865554][T14049] end_report+0x73/0x170 [ 1487.865584][T14049] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1487.865606][T14049] kasan_report+0x128/0x150 [ 1487.865636][T14049] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1487.865661][T14049] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1487.865690][T14049] __kasan_check_byte+0x2a/0x40 [ 1487.865718][T14049] lock_acquire+0x84/0x350 [ 1487.865739][T14049] ? preempt_schedule_thunk+0x16/0x40 [ 1487.865761][T14049] ? rcu_is_watching+0x15/0xb0 [ 1487.865785][T14049] _raw_spin_lock_irqsave+0x40/0x60 [ 1487.865807][T14049] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1487.865837][T14049] rt_mutex_slowunlock+0xbf/0x8b0 [ 1487.865865][T14049] ? reacquire_held_locks+0x104/0x190 [ 1487.865889][T14049] ? rt_spin_lock+0x1e0/0x400 [ 1487.865919][T14049] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1487.865950][T14049] ? rt_spin_unlock+0x14f/0x200 [ 1487.865982][T14049] ? rt_spin_unlock+0x160/0x200 [ 1487.866012][T14049] kbd_event+0x2f91/0x42f0 [ 1487.866055][T14049] ? __pfx_kbd_event+0x10/0x10 [ 1487.866085][T14049] ? try_to_take_rt_mutex+0x840/0xb00 [ 1487.866110][T14049] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1487.866133][T14049] ? __lock_acquire+0x6b5/0x2d10 [ 1487.866159][T14049] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1487.866195][T14049] ? input_pass_values+0x8d/0x890 [ 1487.866224][T14049] input_handle_events_default+0xd4/0x1a0 [ 1487.866254][T14049] ? input_pass_values+0x8d/0x890 [ 1487.866276][T14049] input_pass_values+0x288/0x890 [ 1487.866303][T14049] ? input_handle_event+0x70c/0xf30 [ 1487.866335][T14049] input_event_dispose+0x330/0x6b0 [ 1487.866365][T14049] input_inject_event+0x1d7/0x320 [ 1487.866394][T14049] ? input_inject_event+0xb0/0x320 [ 1487.866423][T14049] evdev_write+0x328/0x4c0 [ 1487.866448][T14049] ? __lock_acquire+0x6b5/0x2d10 [ 1487.866471][T14049] ? __pfx_evdev_write+0x10/0x10 [ 1487.866502][T14049] ? rw_verify_area+0x25b/0x4e0 [ 1487.866531][T14049] ? __pfx_evdev_write+0x10/0x10 [ 1487.866558][T14049] vfs_write+0x2a3/0xba0 [ 1487.866591][T14049] ? __pfx_vfs_write+0x10/0x10 [ 1487.866620][T14049] ? __fget_files+0x2a/0x420 [ 1487.866648][T14049] ? __fget_files+0x2a/0x420 [ 1487.866671][T14049] ? __fget_files+0x3a6/0x420 [ 1487.866695][T14049] ? __fget_files+0x2a/0x420 [ 1487.866722][T14049] ksys_write+0x156/0x270 [ 1487.866751][T14049] ? __pfx_ksys_write+0x10/0x10 [ 1487.866784][T14049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.866807][T14049] do_syscall_64+0x15f/0xf80 [ 1487.866832][T14049] ? clear_bhb_loop+0x40/0x90 [ 1487.866855][T14049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.866875][T14049] RIP: 0033:0x7f03fe4fcdd9 [ 1487.866894][T14049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.866914][T14049] RSP: 002b:00007f03fc72d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1487.866938][T14049] RAX: ffffffffffffffda RBX: 00007f03fe776090 RCX: 00007f03fe4fcdd9 [ 1487.866954][T14049] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000007 [ 1487.866968][T14049] RBP: 00007f03fe592d69 R08: 0000000000000000 R09: 0000000000000000 [ 1487.866983][T14049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1487.866997][T14049] R13: 00007f03fe776128 R14: 00007f03fe776090 R15: 00007fff3d66f0e8 [ 1487.867031][T14049] [ 1487.868501][T14049] Kernel Offset: disabled