last executing test programs: 7m25.72690797s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x28102) r6 = io_uring_setup(0x72a2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, 0x0, 0x0) 7m24.138197598s ago: executing program 2 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0xffff, &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_dev$video4linux(0x0, 0xff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000100)={0xb, 0xe0, "95e0eb5de8f03b967568adf62c682340e9c4fd53a69dcd1c", {0xdbf, 0x6}, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) 7m23.450048712s ago: executing program 2 (id=9): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000080)={&(0x7f0000000580)=[0x6, 0x6215139e, 0xa72, 0x8, 0x9d, 0x9, 0x2860, 0xed9, 0x8000, 0xa0000000, 0x0, 0x6, 0x3, 0x7, 0xf, 0x5, 0xa, 0x7, 0x0, 0x4, 0x100000, 0x9, 0x0, 0x32e, 0x1000, 0x7fff, 0xfffff251, 0x10000, 0x5, 0x3, 0x0, 0xb2, 0xe, 0x0, 0x7, 0xb, 0xb, 0x1, 0x100, 0x4, 0xeab, 0xfa4, 0x1, 0x2, 0xe32ebab, 0xc, 0x7ff, 0x3407, 0x4, 0xffff0000, 0xa, 0x4, 0x2, 0x7, 0xfff, 0x0, 0x1, 0x8000, 0x4, 0xfffffff6, 0x0, 0x7, 0xfff, 0x10001, 0x3, 0x1, 0xfffffff7, 0x6, 0x3, 0x2, 0x8, 0x4f9, 0x8, 0x3, 0x7, 0x2, 0x7e, 0x2, 0x5, 0x5c0, 0x7ff, 0x0, 0xf, 0xffff0001, 0x997, 0x9, 0x7, 0x5, 0x3ff, 0x7fffffff, 0x63c7, 0x3da, 0x7, 0x4e, 0xfffffffe, 0x0, 0x2, 0x80, 0x0, 0xffffffff, 0x2, 0x80, 0x200, 0x516df4cd, 0x6, 0x7fff, 0x1, 0xd46, 0x80000000, 0x54, 0x7fff, 0x7, 0xfab, 0x3973d9f2, 0x4, 0xad, 0x2, 0x6, 0x9, 0x4, 0x15, 0xd69, 0x6, 0x197, 0xc, 0x101, 0x4, 0x1000, 0xfffffff4, 0x2, 0x7fffffff, 0x10000, 0x3, 0x3d4, 0x0, 0x2, 0x8, 0x552, 0x6, 0x3036, 0x85, 0x1, 0x1, 0x8, 0x1, 0x800, 0xfffffbff, 0x7, 0x632, 0x1000, 0x100, 0x3, 0x55b, 0x1000, 0x5, 0x800, 0x2fe, 0x5, 0x9, 0x0, 0x1000, 0xd, 0xfffff001, 0x8, 0x1000, 0x6, 0xc, 0x1, 0x9, 0x80, 0x6, 0x8, 0x0, 0x82c, 0x6f8, 0x9, 0x2, 0x1, 0xffffffc0, 0x32af, 0x0, 0xfffffffd, 0x7fff, 0xbd82, 0x40, 0x9, 0x7f, 0x4, 0x1, 0x5, 0x39, 0x3, 0x80, 0x28, 0x3ff, 0x1000, 0x5, 0x400, 0xb0cb, 0x0, 0x6, 0x7, 0x6, 0x4, 0x6, 0x3, 0xfff, 0x6, 0x24a5, 0xf805, 0x40, 0x6, 0x0, 0x3, 0xbc8a, 0x9, 0xe9, 0x47, 0x2, 0x4, 0x5, 0x2, 0x8, 0x9, 0x5, 0x0, 0x1, 0x8, 0x2, 0x8, 0x7, 0x5, 0x81, 0x0, 0x4, 0x5, 0x9, 0x7fffffff, 0x3, 0xc, 0x8, 0xfffffffa, 0x1ff, 0x5, 0x200, 0xfff, 0x7, 0x8, 0x7, 0x8, 0x8, 0xfffffffa, 0x6, 0x9, 0x10, 0x0, 0x6, 0x3, 0x285, 0x9, 0x6, 0x7, 0x0, 0x9, 0x1113, 0xb, 0xa, 0x5, 0x1, 0x3ff, 0x90, 0x2, 0x200, 0x8, 0x5, 0x0, 0x7, 0x1, 0x9, 0x9, 0x0, 0xc, 0x6, 0x9, 0x1, 0x7, 0x9, 0xfffffff9, 0x5e, 0x401, 0x5, 0x10000, 0x1478, 0x5, 0x1, 0xa, 0x9, 0x3f8, 0x80000000, 0x1ff, 0x744, 0x3ff, 0x0, 0x9, 0xfffffff7, 0x8, 0x1, 0xd, 0x5, 0x0, 0xc, 0x4, 0x4, 0x0, 0x7cf, 0x4, 0xfff, 0x5, 0xecd6, 0x0, 0x3, 0x1, 0xf896, 0x4, 0x2, 0x8, 0x24c, 0x6, 0xfe, 0x12f35aea, 0x2, 0xd, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x10001, 0x53, 0x100, 0x98f, 0x1ff, 0x1, 0xf26, 0x7fffffff, 0x1ff, 0x7f, 0x6, 0x7ff, 0xe9, 0x9, 0x1ff, 0x40, 0xce6a, 0x10, 0xfd, 0x6, 0xd, 0x4, 0x9, 0x9, 0x5, 0x80000001, 0x9, 0x0, 0x5, 0x77e, 0x0, 0x3, 0x2, 0x62cda45a, 0x8, 0x4, 0x3, 0x6, 0x0, 0x4, 0x6, 0x30, 0x7, 0x3, 0x4, 0x5, 0x4, 0x3, 0x2, 0x3, 0xbdb9, 0xd, 0x3, 0xc, 0x1, 0xfd9, 0xf, 0xfffffffb, 0x9, 0x1, 0x1, 0x80, 0x7, 0x4, 0x2, 0x9, 0xf, 0x5, 0x100, 0x9, 0xa, 0x9, 0x7f, 0xffff06b3, 0x7e6, 0x9, 0x3, 0xc59, 0xd, 0x5b1, 0x9, 0xf, 0x5, 0xfffffffd, 0x5, 0x8, 0x3, 0x8, 0x4, 0x200, 0x9, 0x3ff, 0x9, 0xa88, 0x8ed6, 0x3, 0x0, 0x7, 0x9, 0x5, 0x3, 0x7, 0x1ff, 0x4f, 0xfea, 0xffff3a5d, 0x802, 0x81, 0x4, 0xff, 0x7, 0x6, 0x8, 0x3, 0x3, 0x1, 0xfd13, 0x800, 0xfffffffe, 0x2, 0x4d31c54, 0x3, 0x4, 0x9, 0x4, 0x8000, 0x8000, 0x3b3, 0x48000000, 0x9, 0x2, 0x3, 0x9f, 0x5, 0xb7c0000, 0xf, 0x40, 0x6, 0x4, 0x9, 0x6, 0xfffffffb, 0x7, 0x5, 0x5, 0x1, 0x7, 0x4243, 0x44d, 0x7, 0x9, 0x7, 0x0, 0xb7, 0x3, 0x0, 0x7, 0x200, 0x0, 0x1, 0xfffffff8, 0x6, 0x0, 0x101, 0xfffffffd, 0x8, 0x80, 0x7f, 0x3, 0x4, 0x4, 0xc, 0x401, 0x3, 0x0, 0xfffffff8, 0x59416060, 0x5, 0x4, 0x10, 0x0, 0xbc3, 0x4, 0x8000, 0xee, 0x0, 0xfffffff8, 0x4, 0x1, 0x8, 0xe, 0x0, 0x2, 0xb, 0x2, 0x6, 0x2, 0xd8fa, 0xc560, 0x4, 0x7, 0xfff, 0x7f, 0x3, 0xb27, 0x10001, 0xffff, 0x8, 0x0, 0x5, 0x7, 0x3, 0x4, 0x2, 0x71, 0x8001, 0x6, 0x6, 0x3, 0x8, 0x8, 0x5, 0x4, 0x4, 0x1000, 0xdf, 0x0, 0x9, 0x8000, 0x1, 0x7, 0x3, 0xffffff2c, 0x0, 0x9, 0x6, 0xffffffff, 0xff, 0x0, 0x8, 0xc82, 0x322aebb1, 0x9, 0x40, 0x4, 0xff, 0xa7, 0x5, 0x9, 0x5, 0x1ea, 0x6, 0xfff, 0x8, 0x4, 0xb977, 0x0, 0x9, 0x0, 0xfffffffa, 0x0, 0x6, 0x8001, 0x7, 0x66917e3f, 0x5, 0x400, 0x4, 0x71b8e1e, 0x0, 0x7b6, 0xefc, 0x5, 0x0, 0xfffffbff, 0xe, 0xc, 0xa, 0x5, 0x0, 0xffff, 0x0, 0x6fe47f9c, 0x6, 0x4, 0x0, 0xfffff237, 0x4, 0xb23, 0xff, 0x36e8, 0x80000001, 0x1606, 0x7ff, 0x9, 0x2, 0x4, 0x8, 0x1, 0x6, 0x8, 0x6, 0x3, 0xfd7b, 0x6, 0x7, 0x3, 0x6, 0x2, 0x5, 0xfffffffe, 0x1, 0x1, 0x0, 0xffffffff, 0x4, 0x800, 0x9, 0x6, 0x944, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x0, 0x101, 0x9, 0x7, 0x800, 0x3, 0xc4, 0x6, 0xe1cc, 0x6, 0xffffff29, 0x8a04, 0x4, 0x24a46a67, 0x6, 0x9, 0x0, 0x8, 0x5, 0x27dd, 0x3, 0x101, 0x5, 0x4, 0x2, 0x9, 0xa, 0x5, 0x4, 0x2, 0x6fa, 0x10001, 0xb, 0x2, 0x6, 0x5, 0x4, 0xaed1, 0x9, 0x8, 0x9d, 0x40a, 0x8a1c, 0x2, 0x1ff, 0x2, 0x0, 0x8000, 0x200, 0x796f, 0x8, 0x6, 0x1, 0x0, 0x9, 0xb, 0x0, 0x4, 0x0, 0x3, 0x9, 0x3, 0x9, 0xbf58, 0x7d3, 0x1, 0x2, 0x3, 0x0, 0x0, 0x5, 0x1ff, 0x3, 0x4, 0x6, 0x3, 0x3b4599c3, 0x4, 0x6, 0x1, 0x200, 0x4, 0xb, 0x2ba, 0x5, 0x7fff, 0xa5, 0xff, 0x7, 0x9, 0x99f, 0x3, 0x8001, 0x8, 0xe, 0x8000, 0x2, 0x1, 0x8, 0x1, 0xfffffffb, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0x4, 0x800, 0x48, 0x7, 0x4, 0x7, 0x5, 0xc, 0x401, 0x80, 0x8, 0xe2, 0x81, 0x100, 0x4, 0x1000, 0x6, 0xde6f, 0x2, 0x8, 0x5, 0x5, 0x9bf7, 0x1, 0x4, 0x0, 0x3, 0x100, 0x4, 0xfffff801, 0x9, 0xd46, 0x8001, 0x8, 0xfd30, 0x2, 0x7, 0x683ba4a6, 0x6, 0x5f, 0x1ff, 0xf4, 0x3, 0x3ff, 0x80000001, 0x3, 0x0, 0x4, 0xffffffff, 0x7ff, 0x9, 0x5, 0x4, 0x3ff, 0xe, 0x3ff, 0x4800000, 0x3, 0x0, 0x80, 0xf97, 0xd2ce, 0x2, 0xc, 0xe14b, 0x401, 0x1, 0x4d, 0x4, 0x0, 0xffff, 0x80000001, 0x4, 0x9, 0x24, 0x5, 0xfff, 0x6, 0x6, 0x0, 0x7, 0x7d3, 0x8, 0x3, 0x6, 0x5, 0x7, 0x1, 0xa, 0x6, 0x46, 0x40, 0x10001, 0xffffffff, 0x4, 0x0, 0xffffffff, 0x7, 0x9, 0x6a, 0x0, 0x0, 0x2935, 0x3, 0x4, 0x45, 0x6b9, 0x3, 0x9, 0x7, 0x7, 0x1000, 0x5, 0x3, 0x400, 0x2, 0x7, 0x55f0, 0x6, 0x1ff, 0x5, 0x6, 0x8000, 0x1ff, 0xfffff6d6, 0x3, 0xfffffffa, 0x647, 0x48c, 0x4, 0x8001, 0xff, 0xfa, 0x4, 0x8, 0x1, 0x2, 0x2, 0x81, 0x7ff, 0x400, 0x101, 0xfffffffc, 0x3ff, 0xb, 0x7, 0xfffffffc, 0x2, 0x9, 0x3, 0x9, 0xffffff00, 0xade, 0x5, 0x8, 0x7, 0x6, 0x8, 0x8, 0x8f, 0x7, 0x7fff, 0x6, 0x5, 0x8, 0x1, 0x1, 0x0, 0x2, 0x2, 0x227, 0x76, 0x0, 0x10, 0x8, 0x619d, 0x9, 0x6, 0x7, 0x0, 0x5953, 0x77, 0x9, 0xa7da, 0x4a2, 0x4, 0xe, 0x81, 0x0, 0x10000, 0x8, 0x9, 0x10, 0x8, 0x9, 0x7fffffff, 0x4, 0x2, 0x1000, 0xdc, 0xffffff5f, 0xfffffffe, 0x5, 0x400, 0x7f, 0x8001, 0xf, 0x9, 0x100, 0xfffffffd, 0x3, 0xfffffffc, 0x7ff, 0x2, 0xffffffff, 0x2, 0x4, 0xfffffffb, 0x8f29, 0x403b2587, 0xed, 0x2, 0x2, 0x8, 0x6, 0x71c, 0x2, 0x64133690, 0x5, 0x7f, 0x2, 0x3, 0x5, 0x4, 0x5, 0xf, 0x5, 0x3, 0x3, 0x4, 0x7fff, 0x46a, 0x60000, 0x1, 0x6ded, 0x5, 0x1, 0x9, 0x8001, 0x9, 0x5, 0x80000000, 0xe, 0x10, 0xffff8001], 0x2, 0x400, 0xe}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7m18.342517921s ago: executing program 2 (id=16): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) socket$rds(0x15, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) 7m13.947640245s ago: executing program 2 (id=20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r6 = getpid() sched_getattr(r6, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x7, 0xbf, [@dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x36, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x6, 0x2}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0301f78d89b5d6afffb"}]}]}}}}}}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x0, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x8722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) 7m9.794402026s ago: executing program 2 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r5}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) close(r6) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d0000000409021200"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$sysfs(0xffffff9c, 0x0, 0x325840, 0x115) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) 6m53.683554949s ago: executing program 32 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r5}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) close(r6) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d0000000409021200"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$sysfs(0xffffff9c, 0x0, 0x325840, 0x115) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) 3m56.256705278s ago: executing program 1 (id=1226): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) io_uring_setup(0x7d2b, &(0x7f0000000040)={0x0, 0xfaba, 0x40, 0x2, 0xa0}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket(0x10, 0x803, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 3m54.183907562s ago: executing program 1 (id=1230): r0 = open(0x0, 0x4c802, 0xad) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x801) 3m52.06059614s ago: executing program 1 (id=1235): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, 0x0, &(0x7f0000000cc0)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x4080) shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m50.557575647s ago: executing program 1 (id=1236): mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x0, 0x1a, 0x0, 0x1}, 0x28) socket(0x10, 0x80002, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x3, {0x7, 0x28, 0x101, 0x2098004, 0x0, 0x0, 0x0, 0xffffffbf, 0x0, 0x0, 0x100, 0x103}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m49.718685466s ago: executing program 1 (id=1239): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044080}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xa0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m49.205778548s ago: executing program 1 (id=1241): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 3m33.895805665s ago: executing program 33 (id=1241): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2m54.409987328s ago: executing program 5 (id=1489): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000093d000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f000093d000/0x2000)=nil, 0x3) 2m52.539875291s ago: executing program 5 (id=1500): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001040)=@ethtool_drvinfo={0x3, "8f6d8eccfa2559b2b3a5f0eef69cac000000000000000000000200", "336e581aa9cef7d312e5cceea354442ba6a4901e8bfbe62793da4bd034d280b5", "b7148fedb297bfc718ef59ffb6343b51f0050bf56ed8d29f365b931ab12b4243", "1a5ad54a4850f88594ee8cb9079ef007000000000000002a3d5c74842f0900", "3f1332edeb188a8e3c48e14371d81f809f17b9358507b63294fae18e5829647f", "d73dee72d79b389744c2640e", 0x100, 0xfeffffff, 0x2, 0xff1, 0x1}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 2m52.055978439s ago: executing program 4 (id=1502): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) 2m52.054084799s ago: executing program 5 (id=1504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x109002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002840)={0x0, [{0x3, 0x8, 0x8, &(0x7f00000001c0)='{'}, {0x3, 0x8, 0x5, &(0x7f0000000340)='j'}, {0x7, 0x0, 0x40003, 0x0}, {0x0, 0x0, 0x5a5399dd, 0x0}, {0x6, 0x0, 0xf, 0x0}, {0x1, 0x0, 0x36a, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x142, 0x0}, {0x3, 0x0, 0xffffffff, 0x0}, {0x5, 0x0, 0x3, 0x0}, {0x1, 0xffffffffffffff14, 0x80103, 0x0}, {0x3, 0x0, 0xbab7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x10000, 0x0}, {0x7, 0x0, 0x8, 0x0}]}) close(r0) 2m51.598094376s ago: executing program 4 (id=1507): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x2, 0x12) 2m51.233245303s ago: executing program 4 (id=1509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002c0012800b000100697036746e6c"], 0x4c}}, 0x0) 2m50.812340578s ago: executing program 4 (id=1512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x3c}}, 0x0) 2m50.564103548s ago: executing program 4 (id=1513): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) 2m49.911320849s ago: executing program 4 (id=1517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x80000008, 0x0, 0x0, 0x1003, 0x1, 0x3, 0xbe57}]}) 2m44.933963598s ago: executing program 3 (id=1534): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x2, {0x1, 0x1}, {0x2, 0xf0, 0x2}, 0xff, 0xfe}], 0x20) 2m44.028902083s ago: executing program 3 (id=1535): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xfffffffd, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x38}, 0x1, 0xffffffff00000003, 0x0, 0x8000}, 0x4040) 2m43.762569585s ago: executing program 3 (id=1538): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e220000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000780)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="0209fc000700000028bd7000fed3df2505001a"], 0x38}}, 0x40408c0) 2m42.628131744s ago: executing program 3 (id=1547): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m42.526494221s ago: executing program 3 (id=1549): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1) 2m42.339292136s ago: executing program 3 (id=1551): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 2m38.208006635s ago: executing program 5 (id=1571): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 2m38.046307976s ago: executing program 5 (id=1572): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @broadcast}, 0x10) listen(r0, 0x100) 2m37.861659807s ago: executing program 5 (id=1573): socket(0xa, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.673964231s ago: executing program 34 (id=1517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x80000008, 0x0, 0x0, 0x1003, 0x1, 0x3, 0xbe57}]}) 2m33.296180252s ago: executing program 6 (id=1590): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 2m32.343983627s ago: executing program 6 (id=1592): mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000012c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getdents64(r0, 0x0, 0x22) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') 2m31.000414704s ago: executing program 6 (id=1593): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x172831) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 2m30.733631053s ago: executing program 6 (id=1594): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x806, 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 2m29.710962033s ago: executing program 6 (id=1595): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 2m27.281828326s ago: executing program 35 (id=1551): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 2m26.573449612s ago: executing program 6 (id=1606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x1b0003, 0x0, {[0x4, 0x2, 0x6, 0x9a47, 0x7, 0x80000000, 0x80, 0xe02]}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0xc, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m22.5987787s ago: executing program 36 (id=1573): socket(0xa, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m11.766935272s ago: executing program 7 (id=1640): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) 2m11.608321263s ago: executing program 7 (id=1641): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000007c0)=""/247, 0x3, 0xc2, 0x0, 0x0) 2m11.512682305s ago: executing program 37 (id=1606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x1b0003, 0x0, {[0x4, 0x2, 0x6, 0x9a47, 0x7, 0x80000000, 0x80, 0xe02]}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0xc, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m11.503238201s ago: executing program 7 (id=1643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 2m11.262195373s ago: executing program 7 (id=1644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}, {@nfs_export_on}, {@index_on}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file1\x00'}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r2}}, './bus\x00'}) 2m10.808489269s ago: executing program 7 (id=1645): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 2m5.750046062s ago: executing program 7 (id=1647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m50.616125519s ago: executing program 38 (id=1647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m35.924480286s ago: executing program 8 (id=1686): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mouse(&(0x7f00000000c0), 0x10, 0x10000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000b80)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}}, 0x84) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x29577e49}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4000001}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 1m35.669545595s ago: executing program 8 (id=1688): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2fad8, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m35.503203193s ago: executing program 8 (id=1689): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m32.809139814s ago: executing program 8 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x400000000010, 0x3, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa0, 0x0, 0x7, {{0x0, 0x0, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8000, {0x1000000002, 0xfffffffffffffffe, 0x200000654, 0x3, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xffffffff}}, {0x0, 0x6}}}, 0x0, 0x0}) mount$pvfs2(0x0, 0x0, &(0x7f0000000300), 0x80000, &(0x7f0000000600)={[{'+-/(#]'}, {}, {'^(/'}], [{@seclabel}, {@euid_lt}, {@euid_eq}, {@fowner_eq}, {@uid_gt}, {@smackfshat={'smackfshat', 0x3d, 'syz2\x00'}}]}) 1m31.438752254s ago: executing program 8 (id=1693): pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, 0x0, 0x0) 1m29.662610296s ago: executing program 8 (id=1694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x20040051) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x1000, {0x2, 0xff, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xfffb, 0xfff2}, {0xd, 0x8}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x850) 1m25.419155112s ago: executing program 0 (id=1696): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) pwrite64(r0, &(0x7f00000006c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)={0x44, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$lan78xx(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000000, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x24008844, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c040000", @ANYBLOB, @ANYRES16=r3, @ANYBLOB="4b76f3b6"], 0x40c}}, 0x0) 1m24.271315503s ago: executing program 0 (id=1697): pipe2$9p(&(0x7f0000000400), 0x80800) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1m23.674892284s ago: executing program 0 (id=1698): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000080)) 1m20.886404667s ago: executing program 0 (id=1700): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000004c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000001480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1m18.100232617s ago: executing program 0 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000040), 0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x1, 0x0) 1m13.557548147s ago: executing program 39 (id=1694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x20040051) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x1000, {0x2, 0xff, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xfffb, 0xfff2}, {0xd, 0x8}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x850) 1m12.246814213s ago: executing program 0 (id=1706): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e657720656372797074667320747275737465643a2c2f23b72f2c203030303030000000003030303030"], 0x31, 0x0) get_robust_list(0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) dup3(0xffffffffffffffff, r0, 0x80000) keyctl$read(0xb, r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) socket(0xa, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='vfat\x00', 0x0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x80\x00') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_extract_tcp_res(&(0x7f0000000080), 0x1ff, 0x5) syz_emit_ethernet(0x22, &(0x7f0000000200)={@local, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0x100}], @generic="1806a2f5e3b7677d"}}}}, 0x0) 57.096022994s ago: executing program 40 (id=1706): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e657720656372797074667320747275737465643a2c2f23b72f2c203030303030000000003030303030"], 0x31, 0x0) get_robust_list(0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) dup3(0xffffffffffffffff, r0, 0x80000) keyctl$read(0xb, r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) socket(0xa, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='vfat\x00', 0x0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x80\x00') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_extract_tcp_res(&(0x7f0000000080), 0x1ff, 0x5) syz_emit_ethernet(0x22, &(0x7f0000000200)={@local, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0x100}], @generic="1806a2f5e3b7677d"}}}}, 0x0) 20.229053328s ago: executing program 9 (id=1735): r0 = getpid() r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x26}, @RTA_EXPIRES={0x8, 0x17, 0x80000001}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x84) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4d2, 0xb, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x1) capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f00000001c0)={0x0, 0x7, 0xfff, 0xfff, 0x2, 0x5}) preadv2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001200)=""/4080, 0xff0}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000200)=""/13, 0xd}], 0x4, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, 0x25, 0x109, 0x870bd1f, 0xfffffff9, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0xf}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) 20.029000441s ago: executing program 9 (id=1736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 18.986586435s ago: executing program 9 (id=1737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf250400dfff06000b00050000000800020005000000090001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18.612326147s ago: executing program 9 (id=1738): mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) 18.378765758s ago: executing program 9 (id=1739): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000500)={0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x15) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f0770", 0xe}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x32100, 0x0) capget(&(0x7f0000000400)={0x20071026}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) capset(&(0x7f0000000480)={0x20080522, r3}, &(0x7f00000004c0)={0x2, 0x400, 0x0, 0x4000, 0x6, 0x975d}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000002500010033bd7004fedbdf250900000c20000e801c"], 0x34}, 0x1, 0x0, 0x0, 0x4800d}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605e900000000000000000000000005000400000000000900020073797a320000000014000780050015000000000008001240fb7cd6790500050002000000050001000600000016000300686173683a6e6574"], 0x64}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2, 0xffffffffffffffff}, 0x4) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x60002, 0x0) readv(r7, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/105, 0x69}], 0x1) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3c00028038001400240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000f0ffff"], 0x58}, 0x1, 0x0, 0x0, 0x400}, 0x2000c040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x1d, &(0x7f00000005c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff03e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000006c0)='GPL\x00', 0x6, 0xa, &(0x7f0000000700)=""/10, 0x1f00, 0x8, '\x00', r11, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x8, 0x0, 0x7}, 0x10, 0x1a9e3, r0, 0x9, 0x0, &(0x7f00000007c0)=[{0x2, 0x1, 0x9, 0x7}, {0x2, 0x2, 0x8, 0x6}, {0x3, 0x4, 0xb, 0x5}, {0x0, 0x1, 0x10, 0xb}, {0x3, 0x3, 0x7, 0x7}, {0x1, 0x2, 0xe, 0xa}, {0x1, 0x4, 0x5, 0x2}, {0x0, 0x1, 0x9, 0x9}, {0x1, 0x1, 0xd}], 0x10, 0xff0}, 0x94) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=@newae={0x25c, 0x1e, 0x2, 0x70bd2a, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xa, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x3502}, [@proto={0x5, 0x19, 0x84}, @algo_crypt={0xb2, 0x2, {{'rfc3686(xchacha12-neon)\x00'}, 0x350, "96a4dccdeca1b0ef6377b146738182694a7ae658ee92271a620243708dbfdac9d6351d86f9fcd404f1617a97f5c41c131b513471e7dcec5964cf73ccb4a2da4770af36488a345f2401e34837650ba724772b8a6e3104775df6111457318965973fa67d66026bd2b95178"}}, @srcaddr={0x14, 0xd, @in6=@empty}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8000}, @coaddr={0x14, 0xe, @in=@remote}, @offload={0xc}, @algo_aead={0x122, 0x12, {{'morus1280-avx2\x00'}, 0x6b0, 0xc0, "6908642ae2aef898fdfec3a59ad5bd4a672837a9eec05f627053bd29b855227d7a91a813c3c6066d8d7519dbd369dbbd9cdf73042988956ed0e753bd2a2663822b4af72ef2f81be6998946f169c1f530ef51baeb1f22521d678747868373654db4c94bed44b704e4ce4f1c129c652f973124c739f92a1013652d4546aab5f226bed2afa562a5b7801986098d55fc171801df6fe22b1a30f65d5dcb5e07dac85fd313a3b0b428ae6c3ab607a156d908183fef5e01d07c37e706fb04f1efa80a6e6f449f01bede3fd48c98e02817e5c7d73ab2f3ae25cf"}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4004}, 0x4040) 15.340344842s ago: executing program 9 (id=1740): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x10, 0x0, &(0x7f0000000740)=[@clear_death], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004140}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00', 0xa175}) r5 = socket$isdn_base(0x22, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x71}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000005}, 0x24000080) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) ioctl(r5, 0x8b32, &(0x7f0000000040)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fallocate(r8, 0x6a, 0x4, 0x3) sendmsg$AUDIT_SET_FEATURE(r8, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24008051}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 0s ago: executing program 41 (id=1740): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x10, 0x0, &(0x7f0000000740)=[@clear_death], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004140}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00', 0xa175}) r5 = socket$isdn_base(0x22, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x71}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000005}, 0x24000080) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) ioctl(r5, 0x8b32, &(0x7f0000000040)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fallocate(r8, 0x6a, 0x4, 0x3) sendmsg$AUDIT_SET_FEATURE(r8, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24008051}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) kernel console output (not intermixed with test programs): [ 171.658080][ T6792] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 171.851588][ T6796] kAFS: unable to lookup cell '(' [ 171.886955][ T6796] kAFS: unable to lookup cell '(,c¾ûL' [ 172.105356][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.306'. [ 172.204626][ T6812] sctp: [Deprecated]: syz.0.307 (pid 6812) Use of int in max_burst socket option. [ 172.204626][ T6812] Use struct sctp_assoc_value instead [ 174.591465][ T5869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.738056][ T6859] netlink: 60 bytes leftover after parsing attributes in process `syz.5.323'. [ 174.760440][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.760478][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.760502][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.760548][ T5869] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.760583][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.890653][ T5869] usb 1-1: config 0 descriptor?? [ 175.151956][ T5860] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 175.449669][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 175.455598][ T5860] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 175.455626][ T5860] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.499856][ T5860] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.499959][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.499983][ T5860] usb 4-1: Product: syz [ 175.499999][ T5860] usb 4-1: Manufacturer: syz [ 175.500014][ T5860] usb 4-1: SerialNumber: syz [ 175.685949][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.685994][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.686023][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4 [ 175.686112][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x1 [ 175.686142][ T5869] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description [ 175.687479][ T5869] plantronics 0003:047F:FFFF.0002: parse failed [ 175.687724][ T5869] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 175.785412][ T5860] usb 4-1: 0:2 : does not exist [ 175.806677][ T5860] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 175.879541][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.900389][ T5883] usb 1-1: USB disconnect, device number 4 [ 176.031575][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.031611][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.031634][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.031676][ T5884] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 176.031699][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.032230][ T5860] usb 4-1: USB disconnect, device number 5 [ 176.176265][ T5884] usb 6-1: config 0 descriptor?? [ 176.221684][ T6871] tipc: Started in network mode [ 176.221776][ T6871] tipc: Node identity 723be0015eac, cluster identity 4711 [ 176.299908][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.341941][ T6871] tipc: Enabled bearer , priority 14 [ 176.664637][ T5884] kye 0003:0458:501A.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 176.665546][ T5884] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 176.665577][ T5884] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 176.665604][ T5884] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 176.665629][ T5884] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 176.665655][ T5884] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 176.665681][ T5884] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 176.883744][ T5884] kye 0003:0458:501A.0003: hidraw0: USB HID vff.fc Device [HID 0458:501a] on usb-dummy_hcd.5-1/input0 [ 176.883778][ T5884] kye 0003:0458:501A.0003: tablet-enabling feature report not found [ 176.883791][ T5884] kye 0003:0458:501A.0003: tablet enabling failed [ 176.974792][ T5884] usb 6-1: USB disconnect, device number 2 [ 177.053832][ T6884] fido_id[6884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 177.362310][ T5884] tipc: Node number set to 748150785 [ 177.520529][ T6899] kAFS: unable to lookup cell '(' [ 177.521366][ T6899] kAFS: unable to lookup cell '(,c¾ûL' [ 178.170269][ T37] audit: type=1326 audit(1773245589.187:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 178.191778][ T37] audit: type=1326 audit(1773245589.207:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 178.191833][ T37] audit: type=1326 audit(1773245589.207:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 178.191879][ T37] audit: type=1326 audit(1773245589.207:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 178.191926][ T37] audit: type=1326 audit(1773245589.207:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 178.210487][ T37] audit: type=1326 audit(1773245589.217:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 178.210724][ T37] audit: type=1326 audit(1773245589.217:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 178.210841][ T37] audit: type=1326 audit(1773245589.217:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 178.490126][ T6916] netlink: 84 bytes leftover after parsing attributes in process `syz.5.348'. [ 178.582286][ T6918] Bluetooth: MGMT ver 1.23 [ 178.643733][ T6921] ======================================================= [ 178.643733][ T6921] WARNING: The mand mount option has been deprecated and [ 178.643733][ T6921] and is ignored by this kernel. Remove the mand [ 178.643733][ T6921] option from the mount to silence this warning. [ 178.643733][ T6921] ======================================================= [ 178.917042][ T6931] netlink: 216 bytes leftover after parsing attributes in process `syz.3.354'. [ 178.917069][ T6931] netlink: 'syz.3.354': attribute type 2 has an invalid length. [ 178.917084][ T6931] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 180.350383][ T5883] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 180.508354][ T5883] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 180.508387][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.508407][ T5883] usb 6-1: Product: syz [ 180.508420][ T5883] usb 6-1: Manufacturer: syz [ 180.508435][ T5883] usb 6-1: SerialNumber: syz [ 180.593599][ T5883] usb 6-1: config 0 descriptor?? [ 180.647334][ T5883] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 180.719217][ T36] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 180.888746][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 180.923802][ T36] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 180.923893][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.923916][ T36] usb 2-1: Product: syz [ 180.923931][ T36] usb 2-1: Manufacturer: syz [ 180.923946][ T36] usb 2-1: SerialNumber: syz [ 181.080305][ T36] usb 2-1: config 0 descriptor?? [ 181.229882][ T5883] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 181.229980][ T5883] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 181.256929][ T36] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 181.275596][ T5883] usb 6-1: USB disconnect, device number 3 [ 181.346506][ T6017] usb 2-1: Failed to submit usb control message: -71 [ 181.346535][ T6017] usb 2-1: unable to send the bmi data to the device: -71 [ 181.346549][ T6017] usb 2-1: unable to get target info from device [ 181.346560][ T6017] usb 2-1: could not get target info (-71) [ 181.346789][ T6017] usb 2-1: could not probe fw (-71) [ 181.967233][ T36] usb 2-1: USB disconnect, device number 3 [ 182.870115][ T7015] autofs: Bad value for 'fd' [ 183.279729][ T7034] sit0: entered promiscuous mode [ 183.288174][ T7034] netlink: 'syz.0.389': attribute type 1 has an invalid length. [ 183.288200][ T7034] netlink: 1 bytes leftover after parsing attributes in process `syz.0.389'. [ 183.482516][ T7041] capability: warning: `syz.3.392' uses 32-bit capabilities (legacy support in use) [ 184.535764][ T7083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 185.609149][ T5883] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 185.771762][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 185.774584][ T5883] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 185.778790][ T5883] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 185.778822][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.778843][ T5883] usb 6-1: Product: syz [ 185.778858][ T5883] usb 6-1: Manufacturer: syz [ 185.778873][ T5883] usb 6-1: SerialNumber: syz [ 185.837928][ T5883] usb 6-1: config 0 descriptor?? [ 185.918470][ T5883] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 185.918541][ T5883] usb 6-1: setting power ON [ 185.954512][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 186.039633][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.046401][ T5883] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 186.046490][ T5883] usb 6-1: media controller created [ 186.113374][ T7111] dvb-usb: bulk message failed: -22 (3/0) [ 186.113402][ T7111] dvb-usb: bulk message failed: -22 (5/0) [ 186.196769][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.359497][ T5883] usb 6-1: selecting invalid altsetting 6 [ 186.359534][ T5883] usb 6-1: digital interface selection failed (-22) [ 186.359556][ T5883] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 186.366033][ T5883] usb 6-1: setting power OFF [ 186.366178][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 186.366198][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 186.366211][ T5883] (NULL device *): no alternate interface [ 186.732226][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 186.776335][ T5883] usb 6-1: USB disconnect, device number 4 [ 186.786841][ T7143] netlink: 192 bytes leftover after parsing attributes in process `syz.1.428'. [ 187.443443][ T7159] vlan2: entered promiscuous mode [ 187.443468][ T7159] bridge0: entered promiscuous mode [ 187.913445][ T7176] netlink: 60 bytes leftover after parsing attributes in process `syz.3.440'. [ 187.914571][ T7176] netlink: 60 bytes leftover after parsing attributes in process `syz.3.440'. [ 188.199194][ T5869] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 188.363085][ T5869] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 188.363118][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.363139][ T5869] usb 6-1: Product: syz [ 188.363154][ T5869] usb 6-1: Manufacturer: syz [ 188.363169][ T5869] usb 6-1: SerialNumber: syz [ 188.453343][ T5869] usb 6-1: config 0 descriptor?? [ 188.485205][ T5869] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 188.540503][ T5869] usb 6-1: Detected FT232HP [ 188.673843][ T5869] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 188.704728][ T5869] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 188.903656][ T5869] usb 6-1: USB disconnect, device number 5 [ 188.957838][ T5869] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 188.974531][ T5869] ftdi_sio 6-1:0.0: device disconnected [ 189.700944][ T7218] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in; [ 189.700944][ T7218] program syz.3.458 not setting count and/or reply_len properly [ 189.827438][ T7222] netlink: 'syz.5.459': attribute type 1 has an invalid length. [ 189.827465][ T7222] netlink: 'syz.5.459': attribute type 2 has an invalid length. [ 189.908384][ T7229] program syz.3.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.925842][ T7230] warning: `syz.1.463' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.497894][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.470'. [ 190.822088][ T5797] Bluetooth: hci5: command tx timeout [ 192.513053][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 193.914880][ T7329] program syz.0.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.054699][ T37] audit: type=1326 audit(1773245605.067:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acad4c799 code=0x7ffc0000 [ 194.056874][ T37] audit: type=1326 audit(1773245605.067:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acad4c799 code=0x7ffc0000 [ 194.127534][ T37] audit: type=1326 audit(1773245605.137:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acad4c799 code=0x7ffc0000 [ 194.154162][ T37] audit: type=1326 audit(1773245605.137:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acad4c799 code=0x7ffc0000 [ 194.154269][ T37] audit: type=1326 audit(1773245605.137:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f0acad4c799 code=0x7ffc0000 [ 194.155124][ T37] audit: type=1326 audit(1773245605.167:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acad4c799 code=0x7ffc0000 [ 194.155296][ T37] audit: type=1326 audit(1773245605.167:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acad4c799 code=0x7ffc0000 [ 194.155949][ T37] audit: type=1326 audit(1773245605.167:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0acad4c799 code=0x7ffc0000 [ 194.156422][ T37] audit: type=1326 audit(1773245605.167:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7330 comm="syz.5.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0acad4c799 code=0x7ffc0000 [ 194.428050][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.428124][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.875259][ T7348] netlink: 256 bytes leftover after parsing attributes in process `syz.4.516'. [ 194.875284][ T7348] netlink: 72 bytes leftover after parsing attributes in process `syz.4.516'. [ 195.085365][ T7349] input: syz0 as /devices/virtual/input/input6 [ 195.745051][ T7374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.527'. [ 197.709145][ T36] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.859987][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 197.879613][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.879645][ T36] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 197.879670][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.884774][ T36] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 197.884804][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.884824][ T36] usb 4-1: Product: syz [ 197.884838][ T36] usb 4-1: Manufacturer: syz [ 197.884853][ T36] usb 4-1: SerialNumber: syz [ 197.952548][ T36] usb 4-1: config 0 descriptor?? [ 198.383430][ T36] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 198.384605][ T7417] EXT4-fs (loop0): unable to read superblock [ 198.725138][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.546'. [ 198.725168][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.546'. [ 198.725187][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.546'. [ 198.794461][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.546'. [ 198.794492][ T7422] netlink: 'syz.4.546': attribute type 6 has an invalid length. [ 198.820993][ T36] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 198.821675][ T36] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 198.872067][ T36] usb 4-1: USB disconnect, device number 6 [ 199.226269][ T7432] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 199.226430][ T7432] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 199.710215][ T7449] kAFS: unable to lookup cell '(' [ 199.713059][ T7449] kAFS: unable to lookup cell '(,c¾ûL' [ 200.401058][ T7456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.601752][ T7464] capability: warning: `syz.5.566' uses deprecated v2 capabilities in a way that may be insecure [ 201.055100][ T7486] netlink: 'syz.1.573': attribute type 4 has an invalid length. [ 202.152076][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 202.254919][ T7526] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.596'. [ 202.723050][ T7549] binder: 7547:7549 ioctl 400c620e 200000000500 returned -22 [ 203.090624][ T7559] Zero length message leads to an empty skb [ 203.381930][ T7573] program syz.4.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.759313][ T5883] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 203.924990][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.925026][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 203.925167][ T5883] usb 4-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 203.925194][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.017176][ T5883] usb 4-1: config 0 descriptor?? [ 204.209230][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 204.444952][ T5883] hid (null): unknown global tag 0xc [ 204.482559][ T5883] hid_parser_main: 5 callbacks suppressed [ 204.482581][ T5883] lenovo 0003:04B3:3108.0004: unknown main item tag 0x0 [ 204.482608][ T5883] lenovo 0003:04B3:3108.0004: unknown main item tag 0x0 [ 204.482631][ T5883] lenovo 0003:04B3:3108.0004: unknown main item tag 0x0 [ 204.482653][ T5883] lenovo 0003:04B3:3108.0004: unknown main item tag 0x0 [ 204.482675][ T5883] lenovo 0003:04B3:3108.0004: unknown main item tag 0x0 [ 204.482697][ T5883] lenovo 0003:04B3:3108.0004: unknown main item tag 0x0 [ 204.482720][ T5883] lenovo 0003:04B3:3108.0004: unknown main item tag 0x0 [ 204.482743][ T5883] lenovo 0003:04B3:3108.0004: unknown main item tag 0x0 [ 204.482766][ T5883] lenovo 0003:04B3:3108.0004: unknown main item tag 0x0 [ 204.482789][ T5883] lenovo 0003:04B3:3108.0004: unknown global tag 0xc [ 204.482802][ T5883] lenovo 0003:04B3:3108.0004: item 0 1 1 12 parsing failed [ 204.483434][ T5883] lenovo 0003:04B3:3108.0004: hid_parse failed [ 204.483494][ T5883] lenovo 0003:04B3:3108.0004: probe with driver lenovo failed with error -22 [ 204.649239][ T5860] usb 4-1: USB disconnect, device number 7 [ 205.242909][ T7613] netlink: 'syz.4.631': attribute type 11 has an invalid length. [ 205.269287][ T5883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 205.433568][ T5883] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 205.433600][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.433620][ T5883] usb 2-1: config 0 has no interfaces? [ 205.472949][ T5883] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 205.472981][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 205.473003][ T5883] usb 2-1: Product: syz [ 205.473019][ T5883] usb 2-1: Manufacturer: syz [ 205.473034][ T5883] usb 2-1: SerialNumber: syz [ 205.515563][ T5883] usb 2-1: config 0 descriptor?? [ 205.727609][ T5966] usb 2-1: USB disconnect, device number 4 [ 205.894632][ T7631] netlink: 'syz.3.640': attribute type 14 has an invalid length. [ 206.217087][ T7644] program syz.0.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.397662][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.649'. [ 206.663382][ T7654] kAFS: unable to lookup cell '(' [ 206.664311][ T7654] kAFS: unable to lookup cell '(,c¾ûL' [ 206.946982][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.654'. [ 208.756365][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 211.529656][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.668'. [ 211.583484][ T7701] ipvlan1: entered promiscuous mode [ 211.609362][ T7701] ipvlan1: left promiscuous mode [ 212.092144][ T7709] mmap: syz.4.673 (7709) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 212.559105][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 212.709315][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 212.711692][ T5869] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 212.711720][ T5869] usb 5-1: config 0 has no interface number 0 [ 212.742284][ T5869] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 212.742317][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.742338][ T5869] usb 5-1: Product: syz [ 212.742353][ T5869] usb 5-1: Manufacturer: syz [ 212.742368][ T5869] usb 5-1: SerialNumber: syz [ 212.802932][ T5869] usb 5-1: config 0 descriptor?? [ 212.817016][ T5869] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 212.992706][ T7727] netlink: 3 bytes leftover after parsing attributes in process `syz.1.667'. [ 212.992799][ T7727] netlink: 3 bytes leftover after parsing attributes in process `syz.1.667'. [ 213.069435][ T5869] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 213.101965][ T5869] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 213.472663][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 213.487263][ T5883] usb 5-1: USB disconnect, device number 2 [ 213.554179][ T5883] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 213.583937][ T5883] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 213.584863][ T5883] quatech2 5-1:0.51: device disconnected [ 214.004276][ T7748] program syz.5.690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.179016][ T7753] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 214.579083][ T7762] kAFS: unable to lookup cell '(' [ 214.579889][ T7762] kAFS: unable to lookup cell '(,c¾ûL' [ 215.054412][ T37] audit: type=1326 audit(1773245883.071:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.055029][ T37] audit: type=1326 audit(1773245883.071:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.211303][ T37] audit: type=1326 audit(1773245883.231:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.211360][ T37] audit: type=1326 audit(1773245883.231:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.211404][ T37] audit: type=1326 audit(1773245883.231:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.211966][ T37] audit: type=1326 audit(1773245883.231:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.212262][ T37] audit: type=1326 audit(1773245883.231:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.212801][ T37] audit: type=1326 audit(1773245883.231:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.213074][ T37] audit: type=1326 audit(1773245883.231:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.213725][ T37] audit: type=1326 audit(1773245883.231:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aff1dc799 code=0x7ffc0000 [ 215.653071][ T7789] Invalid argument reading file caps for ./file0 [ 215.951294][ T7798] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.710'. [ 216.981665][ T7774] Bluetooth: hci3: command 0x0406 tx timeout [ 216.981801][ T7774] Bluetooth: hci0: command 0x0406 tx timeout [ 216.981900][ T7774] Bluetooth: hci4: command 0x0406 tx timeout [ 216.981983][ T7774] Bluetooth: hci2: command 0x0406 tx timeout [ 217.110188][ T5966] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 217.279127][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 217.283493][ T5966] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 217.283532][ T5966] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 217.283559][ T5966] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.283584][ T5966] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.283629][ T5966] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.283653][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.600114][ T5966] usb 2-1: GET_CAPABILITIES returned 0 [ 217.600165][ T5966] usbtmc 2-1:16.0: can't read capabilities [ 217.824225][ T5966] usb 2-1: USB disconnect, device number 5 [ 217.859257][ T5988] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 218.011867][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 218.018217][ T5988] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.018277][ T5988] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.018306][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.018341][ T5988] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 218.018365][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.044603][ T5988] usb 5-1: config 0 descriptor?? [ 218.104738][ T7835] ªªªªªª: renamed from vlan0 (while UP) [ 218.120762][ T7817] futex_wake_op: syz.3.719 tries to shift op by -1; fix this program [ 218.536838][ T5988] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 218.536878][ T5988] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 218.536905][ T5988] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 218.536933][ T5988] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 218.536961][ T5988] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 218.561877][ T5988] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 218.710734][ C0] usb 5-1: input irq status -75 received [ 218.821827][ T5988] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -38 [ 218.913984][ T36] usb 5-1: USB disconnect, device number 3 [ 219.735602][ T7859] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.738'. [ 219.870341][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 222.286243][ T7914] sctp: [Deprecated]: syz.3.757 (pid 7914) Use of int in max_burst socket option deprecated. [ 222.286243][ T7914] Use struct sctp_assoc_value instead [ 223.165839][ T7921] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.760'. [ 223.480294][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 223.988914][ T5869] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.998192][ T5869] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.998227][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 223.998249][ T5869] usb 5-1: SerialNumber: syz [ 224.530573][ T37] audit: type=1326 audit(1773245892.531:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 224.530629][ T37] audit: type=1326 audit(1773245892.531:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 224.530675][ T37] audit: type=1326 audit(1773245892.541:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 224.535130][ T37] audit: type=1326 audit(1773245892.551:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 224.562631][ T37] audit: type=1326 audit(1773245892.571:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 224.615218][ T37] audit: type=1326 audit(1773245892.611:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e56cc799 code=0x7ffc0000 [ 224.712123][ T37] audit: type=1326 audit(1773245892.621:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6e56cc502 code=0x7ffc0000 [ 224.712177][ T37] audit: type=1326 audit(1773245892.731:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff6e56cc597 code=0x7ffc0000 [ 224.712222][ T37] audit: type=1326 audit(1773245892.731:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff6e5689491 code=0x7ffc0000 [ 224.712266][ T37] audit: type=1326 audit(1773245892.731:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff6e56cd589 code=0x7ffc0000 [ 225.981778][ T5869] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 226.020202][ T5869] usb 5-1: USB disconnect, device number 4 [ 226.067217][ T5869] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 226.119110][ T7960] syz.1.774 uses obsolete (PF_INET,SOCK_PACKET) [ 226.498391][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 226.989255][ T5966] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 227.142850][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 227.148613][ T5966] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 227.148641][ T5966] usb 4-1: config 0 has no interface number 0 [ 227.148683][ T5966] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.148709][ T5966] usb 4-1: config 0 interface 85 has no altsetting 0 [ 227.589425][ T5966] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 227.589664][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.589752][ T5966] usb 4-1: Product: syz [ 227.589858][ T5966] usb 4-1: Manufacturer: syz [ 227.589990][ T5966] usb 4-1: SerialNumber: syz [ 227.766030][ T7993] kAFS: unable to lookup cell '(' [ 228.051126][ T5966] usb 4-1: config 0 descriptor?? [ 228.640057][ T5860] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 228.839474][ T5966] appletouch 4-1:0.85: Geyser mode initialized. [ 229.182850][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 229.200035][ T5966] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input7 [ 229.213995][ T5860] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 229.214073][ T5860] usb 1-1: config 1 has no interface number 0 [ 229.214227][ T5860] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 229.214299][ T5860] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 229.214364][ T5860] usb 1-1: config 1 interface 105 has no altsetting 0 [ 229.253640][ T5860] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 229.253733][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 229.253787][ T5860] usb 1-1: Product: syz [ 229.253828][ T5860] usb 1-1: Manufacturer: syz [ 229.253874][ T5860] usb 1-1: SerialNumber: syz [ 229.418794][ C0] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 229.428649][ T5966] usb 4-1: USB disconnect, device number 8 [ 229.442208][ T8004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 229.447014][ T8004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 229.617188][ T5966] appletouch 4-1:0.85: input: appletouch disconnected [ 229.865113][ T8004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 229.865249][ T8004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 230.337120][ T8026] kAFS: unable to lookup cell '(' [ 230.998395][ T5860] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 230.998940][ T5860] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 231.001603][ T5860] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 231.027663][ T5860] aqc111 1-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 56:99:f2:4f:ff:08 [ 231.030847][ T5860] usb 1-1: USB disconnect, device number 5 [ 231.136808][ T5860] aqc111 1-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 231.224116][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 231.384024][ T5860] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 231.384217][ T5860] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 231.384338][ T5860] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 231.514715][ T8032] bond1: Invalid ad_actor_system MAC address. [ 231.514734][ T8032] bond1: option ad_actor_system: invalid value (281419142266867) [ 231.552542][ T8032] bond1 (unregistering): Released all slaves [ 231.589228][ T5988] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 231.745576][ T5988] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.745607][ T5988] usb 6-1: config 1 has no interface number 0 [ 231.745653][ T5988] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.745680][ T5988] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 231.745708][ T5988] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 231.745742][ T5988] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 231.745769][ T5988] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 80, setting to 64 [ 231.748831][ T5988] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.748862][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.748882][ T5988] usb 6-1: Product: syz [ 231.748896][ T5988] usb 6-1: Manufacturer: syz [ 231.748911][ T5988] usb 6-1: SerialNumber: syz [ 232.364141][ T8038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.579697][ T8038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.579829][ T8038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.789482][ T8038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 233.200067][ T8038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 233.200197][ T8038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 233.228374][ T5988] cdc_ncm 6-1:1.1: bind() failure [ 233.408098][ T5966] usb 6-1: USB disconnect, device number 6 [ 234.690101][ T8090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.516834][ T8115] trusted_key: syz.1.832 sent an empty control message without MSG_MORE. [ 235.812191][ T8119] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.614392][ T5456] veth1_macvtap: left promiscuous mode [ 238.226369][ T8197] netlink: 'syz.4.862': attribute type 12 has an invalid length. [ 238.226394][ T8197] netlink: 'syz.4.862': attribute type 29 has an invalid length. [ 238.226409][ T8197] netlink: 148 bytes leftover after parsing attributes in process `syz.4.862'. [ 238.226447][ T8197] netlink: 'syz.4.862': attribute type 1 has an invalid length. [ 238.226461][ T8197] netlink: 'syz.4.862': attribute type 2 has an invalid length. [ 238.226474][ T8197] netlink: 7 bytes leftover after parsing attributes in process `syz.4.862'. [ 239.115528][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.874'. [ 241.876264][ T8304] kAFS: unable to lookup cell '(' [ 241.895977][ T8304] kAFS: unable to lookup cell '(,c¾ûL' [ 243.603671][ T8314] netlink: 'syz.5.903': attribute type 3 has an invalid length. [ 244.066109][ T8330] netlink: 'syz.0.909': attribute type 9 has an invalid length. [ 244.066132][ T8330] netlink: 'syz.0.909': attribute type 11 has an invalid length. [ 244.066145][ T8330] netlink: 'syz.0.909': attribute type 12 has an invalid length. [ 244.066161][ T8330] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.909'. [ 244.066267][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.909'. [ 244.212624][ T5988] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 244.381391][ T5988] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 244.381424][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.381454][ T5988] usb 5-1: Product: syz [ 244.381470][ T5988] usb 5-1: Manufacturer: syz [ 244.381486][ T5988] usb 5-1: SerialNumber: syz [ 244.476269][ T5988] usb 5-1: config 0 descriptor?? [ 244.906755][ T5988] usb 5-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126) [ 245.117957][ T5988] usb 5-1: Read permanent extended address c6:3f:5f:3c:bb:43:01:c3 from device [ 245.117988][ T5988] usb 5-1: atusb_probe: initialization failed, error = -524 [ 245.118638][ T5988] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 245.322860][ T5988] usb 5-1: USB disconnect, device number 5 [ 245.432487][ T8356] netlink: 'syz.3.920': attribute type 83 has an invalid length. [ 245.781647][ T8363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 246.901687][ T8393] input: syz1 as /devices/virtual/input/input9 [ 247.195032][ T8402] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 247.450724][ T8405] loop6: detected capacity change from 0 to 7 [ 247.505302][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.505463][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.524564][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.524605][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.558392][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.558427][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.564457][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.564559][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.608333][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.608387][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.616248][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.616356][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.621253][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.621292][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.621400][ T8405] ldm_validate_partition_table(): Disk read failed. [ 247.621865][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.621940][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.623239][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.623323][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.624411][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.624488][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.625814][ T8405] Dev loop6: unable to read RDB block 0 [ 247.755215][ T8405] loop6: unable to read partition table [ 247.755478][ T8405] loop6: partition table beyond EOD, truncated [ 247.755533][ T8405] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 248.252488][ T8426] binder: 8425:8426 ioctl c00c620f 0 returned -14 [ 249.183016][ T8436] sctp: [Deprecated]: syz.4.951 (pid 8436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.183016][ T8436] Use struct sctp_sack_info instead [ 249.233584][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 249.656449][ T8452] veth0: entered promiscuous mode [ 249.689428][ T8451] veth0: left promiscuous mode [ 250.184464][ T8464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.711434][ T8488] loop6: detected capacity change from 0 to 7 [ 250.744388][ T8488] Dev loop6: unable to read RDB block 7 [ 250.744420][ T8488] loop6: AHDI p2 [ 250.744451][ T8488] loop6: partition table partially beyond EOD, truncated [ 254.104349][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 254.104370][ T37] audit: type=1326 audit(1773245922.121:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.4.999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6aff1dc799 code=0x0 [ 254.281535][ T8582] binder: 8576:8582 ioctl c0306201 0 returned -14 [ 254.324343][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1003'. [ 255.636733][ T5783] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 255.789170][ T5783] usb 6-1: Using ep0 maxpacket: 8 [ 255.795466][ T5783] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 255.795527][ T5783] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.795551][ T5783] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.795576][ T5783] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.795599][ T5783] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.795643][ T5783] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.795667][ T5783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.877860][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.877934][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.132664][ T5783] usb 6-1: usb_control_msg returned -32 [ 256.132713][ T5783] usbtmc 6-1:16.0: can't read capabilities [ 256.708296][ T5988] usb 6-1: USB disconnect, device number 7 [ 256.725582][ T8646] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71 [ 258.225859][ T8673] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1031'. [ 258.894649][ T8692] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 259.097721][ T8694] netlink: 'syz.0.1040': attribute type 2 has an invalid length. [ 259.455057][ T8703] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 259.455085][ T8703] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 259.465728][ T8703] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 259.465749][ T8703] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 259.880799][ T5860] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 260.043914][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 260.056909][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.056942][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.056966][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.057009][ T5860] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.057033][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.154461][ T5860] usb 1-1: config 0 descriptor?? [ 260.596911][ T5860] HID 045e:07da: Invalid code 65791 type 1 [ 260.648648][ T5860] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input10 [ 260.832581][ T5860] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 260.934908][ T5860] usb 1-1: USB disconnect, device number 6 [ 261.126715][ T8728] fido_id[8728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 262.079181][ T994] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 262.279627][ T994] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 262.279659][ T994] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 262.279681][ T994] usb 6-1: Product: syz [ 262.279696][ T994] usb 6-1: Manufacturer: syz [ 262.279711][ T994] usb 6-1: SerialNumber: syz [ 262.305577][ T994] usb 6-1: config 0 descriptor?? [ 262.326579][ T994] ch341 6-1:0.0: ch341-uart converter detected [ 262.471505][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 262.657505][ T8751] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 262.790148][ T5860] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 262.959560][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 262.964044][ T5860] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 262.964110][ T5860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.964192][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.964220][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.964244][ T5860] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.964288][ T5860] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.964367][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.319988][ T994] ch341-uart ttyUSB0: break control not supported, using simulated break [ 263.338283][ T5860] usb 2-1: usb_control_msg returned -32 [ 263.338332][ T5860] usbtmc 2-1:16.0: can't read capabilities [ 263.392379][ T994] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 263.514033][ T994] usb 6-1: USB disconnect, device number 8 [ 263.567757][ T994] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 263.597593][ T994] ch341 6-1:0.0: device disconnected [ 263.965359][ T5884] usb 2-1: USB disconnect, device number 6 [ 265.075237][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1081'. [ 265.437209][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1084'. [ 265.509782][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1084'. [ 265.801930][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1088'. [ 265.943667][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.943806][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1088'. [ 265.971065][ T1490] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.971119][ T1490] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.971157][ T1490] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.149810][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 267.438263][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 267.564326][ T8861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.360018][ T8870] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1104'. [ 269.547541][ T8863] veth3: entered promiscuous mode [ 269.582130][ T8863] bond2: (slave veth3): Enslaving as an active interface with an up link [ 269.879129][ T5783] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 270.031493][ T5783] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.031519][ T5783] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.035968][ T5783] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.035998][ T5783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.036018][ T5783] usb 6-1: SerialNumber: syz [ 270.352950][ T5783] usb 6-1: 0:2 : does not exist [ 270.485342][ T5783] usb 6-1: USB disconnect, device number 9 [ 270.661860][ T8891] kvm: MONITOR instruction emulated as NOP! [ 270.686806][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.939829][ T8893] bond0: (slave bond_slave_0): Releasing backup interface [ 272.708822][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 272.911279][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 528 [ 272.911304][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.913962][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 272.913984][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 272.913999][ T10] usb 5-1: Product: syz [ 272.914009][ T10] usb 5-1: Manufacturer: syz [ 272.914019][ T10] usb 5-1: SerialNumber: syz [ 272.992384][ T8917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.249539][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 274.662888][ C0] usblp0: nonzero write bulk status received: -71 [ 274.960689][ T36] usb 5-1: USB disconnect, device number 6 [ 274.996717][ T36] usblp0: removed [ 276.499743][ T5860] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 276.501251][ T8949] sit0: left promiscuous mode [ 276.620172][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.652281][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 276.655532][ T5860] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 276.655551][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.655565][ T5860] usb 5-1: config 0 has no interface number 0 [ 276.655596][ T5860] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.655615][ T5860] usb 5-1: config 0 interface 184 has no altsetting 0 [ 276.705928][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.732528][ T5860] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 276.732551][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.732565][ T5860] usb 5-1: Product: syz [ 276.732576][ T5860] usb 5-1: Manufacturer: syz [ 276.732586][ T5860] usb 5-1: SerialNumber: syz [ 276.798002][ T5860] usb 5-1: config 0 descriptor?? [ 276.812425][ T5860] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 276.812697][ T5860] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 277.957876][ T8976] ceph: No mds server is up or the cluster is laggy [ 278.722251][ T5869] usb 5-1: USB disconnect, device number 7 [ 278.810753][ T8949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.846613][ T8949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.519950][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 279.519994][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 281.412846][ T37] audit: type=1804 audit(1773245949.421:61): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1159" name=2F6E6577726F6F742F3138362FE16F8F1F449A7A8356 dev="tmpfs" ino=968 res=1 errno=0 [ 281.516476][ T37] audit: type=1804 audit(1773245949.451:62): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.1159" name=2F6E6577726F6F742F3138362FE16F8F1F449A7A8356 dev="tmpfs" ino=968 res=1 errno=0 [ 283.656463][ T9113] evm: overlay not supported [ 283.969535][ T8949] veth3: left promiscuous mode [ 283.989977][ T143] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.007713][ T143] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.008106][ T143] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.008193][ T143] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.212108][ T9147] tipc: Failed to remove unknown binding: 66,0,0/748150785:1076365967/1076365969 [ 288.212156][ T9147] tipc: Failed to remove unknown binding: 66,0,0/748150785:1076365967/1076365968 [ 288.212583][ T9147] tipc: Failed to remove unknown binding: 66,0,0/748150785:1076365967/1076365969 [ 288.212621][ T9147] tipc: Failed to remove unknown binding: 66,0,0/748150785:1076365967/1076365968 [ 288.335977][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 290.652846][ T9172] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 290.652960][ T9172] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 291.860397][ T9170] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1182'. [ 295.818593][ T9234] netlink: 'syz.4.1192': attribute type 13 has an invalid length. [ 295.818611][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1192'. [ 298.549101][ T5783] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 298.619626][ T9234] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 298.995432][ T5783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.995463][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 298.995520][ T5783] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 298.995545][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.966923][ T5783] usb 4-1: config 0 descriptor?? [ 300.206777][ T5783] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 300.206977][ T5783] dvb-usb: bulk message failed: -22 (3/0) [ 301.087844][ T9251] dvb-usb: bulk message failed: -22 (2/0) [ 301.789662][ T5783] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 301.790566][ T5783] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 301.790621][ T5783] usb 4-1: media controller created [ 301.793360][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.874422][ T5783] dvb-usb: bulk message failed: -22 (6/0) [ 301.875464][ T5783] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 301.887647][ T5783] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 301.910284][ T5783] dvb-usb: schedule remote query interval to 150 msecs. [ 301.910308][ T5783] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 301.941301][ T5783] usb 4-1: USB disconnect, device number 9 [ 302.309356][ T5783] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 307.731946][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 308.309173][ T5988] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 308.539138][ T5988] usb 6-1: Using ep0 maxpacket: 32 [ 308.542018][ T5988] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 308.542053][ T5988] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 308.542074][ T5988] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.542098][ T5988] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 308.542138][ T5988] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 308.542156][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.824209][ T36] usb 6-1: USB disconnect, device number 10 [ 314.739587][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 314.915567][ T9394] tipc: Enabling of bearer rejected, failed to enable media [ 317.305132][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.305210][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.249403][ T37] audit: type=1804 audit(1773245986.261:63): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1237" name=2F6E6577726F6F742F3235362FE16F8F1F449A7A8356 dev="tmpfs" ino=1332 res=1 errno=0 [ 318.719842][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 319.373147][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 322.496802][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.503065][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.924518][ T9465] SQUASHFS error: Failed to read block 0x0: -5 [ 322.991186][ T9463] vlan2: left promiscuous mode [ 322.991213][ T9463] bridge0: left promiscuous mode [ 324.573930][ T9468] (syz.4.1250,9468,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 324.574037][ T9468] (syz.4.1250,9468,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 325.969505][ T5988] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 329.219537][ T5869] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 329.469119][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 332.269104][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.270257][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 332.270297][ T5869] usb 1-1: can't read configurations, error -71 [ 332.697647][ T9507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.744040][ T9507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.849559][ T9510] cgroup: none used incorrectly [ 337.902905][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.930381][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.931925][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.511460][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.512309][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.887419][ T9548] binder: 9545:9548 ioctl 4018620d 0 returned -22 [ 343.777662][ T5797] Bluetooth: hci1: command tx timeout [ 345.779212][ T5797] Bluetooth: hci1: command tx timeout [ 345.935668][ T9533] chnl_net:caif_netlink_parms(): no params data found [ 347.440193][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 347.859201][ T5797] Bluetooth: hci1: command tx timeout [ 348.333684][ T9533] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.339358][ T9533] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.340005][ T9533] bridge_slave_0: entered allmulticast mode [ 348.365022][ T9533] bridge_slave_0: entered promiscuous mode [ 348.375838][ T9533] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.376061][ T9533] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.376274][ T9533] bridge_slave_1: entered allmulticast mode [ 348.393737][ T9533] bridge_slave_1: entered promiscuous mode [ 348.744740][ T9533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.747578][ T9533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.866019][ T9533] team0: Port device team_slave_0 added [ 348.881578][ T9533] team0: Port device team_slave_1 added [ 349.040312][ T9533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.040326][ T9533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.040346][ T9533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.041965][ T9533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.041984][ T9533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.042003][ T9533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.677381][ T9533] hsr_slave_0: entered promiscuous mode [ 349.686578][ T9533] hsr_slave_1: entered promiscuous mode [ 349.696836][ T9533] debugfs: 'hsr0' already exists in 'hsr' [ 349.696869][ T9533] Cannot create hsr debugfs directory [ 349.940601][ T5797] Bluetooth: hci1: command tx timeout [ 352.561229][ T9533] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 352.630397][ T9533] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 352.745357][ T9533] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 352.839202][ T9533] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 353.013373][ T9640] tc_dump_action: action bad kind [ 353.103142][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1305'. [ 353.450492][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1312'. [ 353.564993][ T9533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.597762][ T9533] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.660583][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.660762][ T9096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.696700][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.696847][ T9105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.557889][ T9533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.551029][ T9533] veth0_vlan: entered promiscuous mode [ 355.586867][ T9533] veth1_vlan: entered promiscuous mode [ 355.662342][ T9533] veth0_macvtap: entered promiscuous mode [ 355.681888][ T9533] veth1_macvtap: entered promiscuous mode [ 355.770373][ T9533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.803112][ T9533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.838485][ T9107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.864644][ T9107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.866353][ T9107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.866721][ T9107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.113855][ T9770] kernel read not supported for file /e_1 (pid: 9770 comm: syz.4.1358) [ 356.122934][ T37] audit: type=1800 audit(1773246024.131:64): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1358" name="e_1" dev="mqueue" ino=23940 res=0 errno=0 [ 356.299225][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 356.301103][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.301128][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.448316][ T8307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.448343][ T8307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.467630][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 356.476195][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.476233][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.527281][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 356.527319][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 356.527341][ T10] usb 4-1: Product: syz [ 356.527368][ T10] usb 4-1: Manufacturer: syz [ 356.694857][ T10] hub 4-1:4.0: USB hub found [ 356.862363][ T10] hub 4-1:4.0: 2 ports detected [ 357.072116][ T10] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 357.072154][ T10] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 357.174096][ T10] usb 4-1: USB disconnect, device number 10 [ 357.414093][ T9794] netlink: 'syz.5.1369': attribute type 28 has an invalid length. [ 359.029233][ T5860] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 359.200737][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 359.226292][ T5860] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 359.226326][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.226348][ T5860] usb 4-1: Product: syz [ 359.226364][ T5860] usb 4-1: Manufacturer: syz [ 359.226380][ T5860] usb 4-1: SerialNumber: syz [ 359.283962][ T5860] usb 4-1: config 0 descriptor?? [ 359.499262][ T5860] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 359.912536][ T5860] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 359.947388][ T5860] usb 4-1: USB disconnect, device number 11 [ 361.130125][ T9912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.172289][ T9914] netlink: 'syz.5.1414': attribute type 10 has an invalid length. [ 361.333213][ T9914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.337288][ T9914] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 362.182389][ T9940] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1423'. [ 371.267371][T10085] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in; [ 371.267371][T10085] program syz.5.1465 not setting count and/or reply_len properly [ 371.593102][T10094] 9p: Bad value for 'rfdno' [ 372.331694][T10108] ALSA: mixer_oss: invalid OSS volume '˜:&%$+$%.' [ 372.518345][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 372.518456][T10120] netem: invalid attributes len -7 [ 372.518469][T10120] netem: change failed [ 373.786571][T10145] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.834360][T10142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.147163][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1495'. [ 375.670717][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1495'. [ 376.900906][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1509'. [ 377.667135][T10193] No memory to map [ 378.019253][ T5988] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 378.171535][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.171592][ T5988] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 378.171623][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.223864][ T5988] usb 4-1: config 0 descriptor?? [ 378.706713][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.706756][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.706786][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.706815][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.706841][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.706867][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.706894][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.706921][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.706947][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.706973][ T5988] chicony 0003:04F2:1421.0007: unknown main item tag 0x0 [ 378.707953][ T5988] chicony 0003:04F2:1421.0007: collection stack underflow [ 378.707982][ T5988] chicony 0003:04F2:1421.0007: item 0 0 0 12 parsing failed [ 378.709165][ T5988] chicony 0003:04F2:1421.0007: Chicony hid parse failed: -22 [ 378.709249][ T5988] chicony 0003:04F2:1421.0007: probe with driver chicony failed with error -22 [ 378.894594][ T5988] usb 4-1: USB disconnect, device number 12 [ 378.959193][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.959271][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.782513][T10217] sctp: [Deprecated]: syz.0.1524 (pid 10217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.782513][T10217] Use struct sctp_sack_info instead [ 384.029270][T10248] program syz.6.1536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.310937][T10256] netlink: 'syz.0.1540': attribute type 2 has an invalid length. [ 385.993168][T10281] serio: Serial port ptm0 [ 386.158445][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 389.164614][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 390.299086][ T37] audit: type=1326 audit(1773246058.311:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 390.299145][ T37] audit: type=1326 audit(1773246058.311:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 390.299194][ T37] audit: type=1326 audit(1773246058.311:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 390.299240][ T37] audit: type=1326 audit(1773246058.311:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 390.299287][ T37] audit: type=1326 audit(1773246058.311:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 390.299335][ T37] audit: type=1326 audit(1773246058.311:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 390.299381][ T37] audit: type=1326 audit(1773246058.311:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 390.299427][ T37] audit: type=1326 audit(1773246058.311:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 390.299479][ T37] audit: type=1326 audit(1773246058.311:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 390.299525][ T37] audit: type=1326 audit(1773246058.311:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f860c799 code=0x7fc00000 [ 391.108447][T10333] netlink: 'syz.6.1575': attribute type 4 has an invalid length. [ 391.108480][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1575'. [ 392.112371][T10350] cgroup: fork rejected by pids controller in /syz0 [ 392.760381][T10801] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1585'. [ 394.044051][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 394.084027][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 394.110789][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 394.114742][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 394.115981][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.169134][T10879] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 396.195177][T10879] exFAT-fs (nullb0): invalid boot record signature [ 396.195254][T10879] exFAT-fs (nullb0): failed to read boot sector [ 396.195292][T10879] exFAT-fs (nullb0): failed to recognize exfat type [ 396.260544][ T5797] Bluetooth: hci4: command tx timeout [ 397.037142][T10866] chnl_net:caif_netlink_parms(): no params data found [ 397.420795][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.421329][T10866] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.421611][T10866] bridge_slave_0: entered allmulticast mode [ 397.428498][T10866] bridge_slave_0: entered promiscuous mode [ 397.468162][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.468742][T10866] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.486750][T10866] bridge_slave_1: entered allmulticast mode [ 397.508651][T10866] bridge_slave_1: entered promiscuous mode [ 397.676237][T10866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.698236][T10866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.765932][T10866] team0: Port device team_slave_0 added [ 397.777102][T10866] team0: Port device team_slave_1 added [ 397.833909][T10866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.833929][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.833961][T10866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.849169][T10866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.849188][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.849217][T10866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.339447][ T5797] Bluetooth: hci4: command tx timeout [ 399.137765][T10866] hsr_slave_0: entered promiscuous mode [ 399.148782][T10866] hsr_slave_1: entered promiscuous mode [ 399.160295][T10866] debugfs: 'hsr0' already exists in 'hsr' [ 399.160338][T10866] Cannot create hsr debugfs directory [ 400.014990][T10866] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 400.061273][T10866] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 400.353161][T10866] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 400.419179][ T5797] Bluetooth: hci4: command tx timeout [ 400.773125][T10866] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.884960][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 400.906562][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 400.922525][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 400.938581][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 400.948162][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 401.821000][T10866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.938504][T10866] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.992745][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.004569][ T9105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.047827][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.073200][ T9105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.195796][T10911] chnl_net:caif_netlink_parms(): no params data found [ 402.456283][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.456426][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.456652][T10911] bridge_slave_0: entered allmulticast mode [ 402.458538][T10911] bridge_slave_0: entered promiscuous mode [ 402.500167][ T5800] Bluetooth: hci4: command tx timeout [ 402.518602][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.518728][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.552086][T10911] bridge_slave_1: entered allmulticast mode [ 402.554085][T10911] bridge_slave_1: entered promiscuous mode [ 402.702662][T10911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.745052][T10911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.824982][T10911] team0: Port device team_slave_0 added [ 402.837444][T10911] team0: Port device team_slave_1 added [ 403.059624][ T5800] Bluetooth: hci6: command tx timeout [ 403.144406][T10940] overlayfs: failed to clone upperpath [ 403.195896][T10940] overlayfs: failed to clone upperpath [ 403.238822][T10911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.238847][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.272216][T10911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.302439][T10911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.302460][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.302492][T10911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.788322][T10911] hsr_slave_0: entered promiscuous mode [ 403.802581][T10911] hsr_slave_1: entered promiscuous mode [ 403.803667][T10911] debugfs: 'hsr0' already exists in 'hsr' [ 403.803694][T10911] Cannot create hsr debugfs directory [ 403.845787][T10866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.145158][ T5800] Bluetooth: hci6: command tx timeout [ 405.584031][T10911] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 405.707863][T10866] veth0_vlan: entered promiscuous mode [ 405.724444][T10911] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 405.840224][ T5797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 405.866223][ T5797] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 405.868589][ T5797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 405.891345][ T5797] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 405.892286][ T5797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 406.838527][T10911] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 406.931614][T10911] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 407.092465][T10866] veth1_vlan: entered promiscuous mode [ 407.223320][ T5797] Bluetooth: hci6: command tx timeout [ 407.592886][T10866] veth0_macvtap: entered promiscuous mode [ 407.623787][T10866] veth1_macvtap: entered promiscuous mode [ 407.836259][T10866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.923855][T10866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.021469][ T5797] Bluetooth: hci7: command tx timeout [ 408.453499][ T9105] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.493314][T10966] chnl_net:caif_netlink_parms(): no params data found [ 408.529133][ T6054] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.603696][ T6054] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.633286][T10911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.071959][ T6054] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.299148][ T5797] Bluetooth: hci6: command tx timeout [ 409.322699][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.322726][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.454873][T10966] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.457327][T10966] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.457677][T10966] bridge_slave_0: entered allmulticast mode [ 409.488302][T10966] bridge_slave_0: entered promiscuous mode [ 409.534042][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.534193][T10966] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.534531][T10966] bridge_slave_1: entered allmulticast mode [ 409.537686][T10966] bridge_slave_1: entered promiscuous mode [ 409.591578][T10911] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.776247][T10966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.794723][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.794749][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.103301][ T5797] Bluetooth: hci7: command tx timeout [ 410.574116][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.574903][ T6054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.614156][T10966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.115862][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.141022][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.179732][T10966] team0: Port device team_slave_0 added [ 411.567163][T10966] team0: Port device team_slave_1 added [ 411.943520][T10966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.943543][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.943576][T10966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.998404][T10966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.998427][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.998460][T10966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.189439][ T5797] Bluetooth: hci7: command tx timeout [ 413.146229][T10966] hsr_slave_0: entered promiscuous mode [ 413.147821][T10966] hsr_slave_1: entered promiscuous mode [ 413.186404][T10966] debugfs: 'hsr0' already exists in 'hsr' [ 413.186441][T10966] Cannot create hsr debugfs directory [ 414.268444][ T5797] Bluetooth: hci7: command tx timeout [ 416.640982][T11063] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 416.641018][T11063] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 416.641031][T11063] overlayfs: missing 'lowerdir' [ 416.763693][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.873476][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.909339][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.950018][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.959732][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.060122][ T5800] Bluetooth: hci2: command tx timeout [ 421.139208][ T5800] Bluetooth: hci2: command tx timeout [ 422.169457][T11075] netlink: 'syz.7.1647': attribute type 1 has an invalid length. [ 423.221007][ T5800] Bluetooth: hci2: command tx timeout [ 424.157834][ T157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.299172][ T5800] Bluetooth: hci2: command tx timeout [ 426.629155][T10911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.677514][T11094] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 426.691733][T11094] team0: Port device macvlan2 added [ 427.393670][T11102] overlayfs: failed to clone upperpath [ 427.674892][T10966] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 427.851834][T10966] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 428.512098][T10966] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 428.951990][T10966] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 429.286026][T10911] veth0_vlan: entered promiscuous mode [ 429.523041][T10911] veth1_vlan: entered promiscuous mode [ 429.688583][T11124] fuse: Bad value for 'fd' [ 429.959850][T11065] chnl_net:caif_netlink_parms(): no params data found [ 430.354294][T10911] veth0_macvtap: entered promiscuous mode [ 430.369572][T11065] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.369723][T11065] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.370080][T11065] bridge_slave_0: entered allmulticast mode [ 430.374359][T11065] bridge_slave_0: entered promiscuous mode [ 430.420901][T11065] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.421044][T11065] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.421440][T11065] bridge_slave_1: entered allmulticast mode [ 430.425529][T11065] bridge_slave_1: entered promiscuous mode [ 430.494068][T10911] veth1_macvtap: entered promiscuous mode [ 430.642726][T11065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.672792][T11065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.676911][T10966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.805369][T11065] team0: Port device team_slave_0 added [ 430.824764][T11065] team0: Port device team_slave_1 added [ 430.874981][T10911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.735611][T11065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.735634][T11065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.735664][T11065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.793631][T11065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.793653][T11065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.793684][T11065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.836564][T10911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.872102][T10966] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.048143][ T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.168113][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.168365][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.275539][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.304667][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.597048][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.600162][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.600544][ T8510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.731092][T11065] hsr_slave_0: entered promiscuous mode [ 433.735049][T11065] hsr_slave_1: entered promiscuous mode [ 433.737866][T11065] debugfs: 'hsr0' already exists in 'hsr' [ 433.737900][T11065] Cannot create hsr debugfs directory [ 434.805681][T11155] overlayfs: failed to clone upperpath [ 438.614722][ T9107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.614754][ T9107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.655581][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.692120][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.696918][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.698087][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.698841][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 440.190772][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.190854][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.360191][T11184] netlink: 'syz.0.1673': attribute type 11 has an invalid length. [ 440.822085][ T5800] Bluetooth: hci3: command tx timeout [ 440.962663][ T8307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.962692][ T8307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.139625][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 441.139653][ T37] audit: type=1800 audit(1773246109.141:80): pid=11180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1673" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 441.140638][T11180] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 441.140696][T11180] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 441.140753][T11180] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 441.268028][T11180] syz.0.1673 (11180) used greatest stack depth: 16256 bytes left [ 442.900357][ T5800] Bluetooth: hci3: command tx timeout [ 443.532240][T10966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.836738][T11170] chnl_net:caif_netlink_parms(): no params data found [ 444.911325][T11170] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.911472][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.911773][T11170] bridge_slave_0: entered allmulticast mode [ 444.958258][T11170] bridge_slave_0: entered promiscuous mode [ 444.987572][ T5800] Bluetooth: hci3: command tx timeout [ 445.018274][T11170] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.018508][T11170] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.035118][T11170] bridge_slave_1: entered allmulticast mode [ 445.038030][T11170] bridge_slave_1: entered promiscuous mode [ 445.607411][T11170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.690842][T11229] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 446.673240][T11170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.060634][ T5800] Bluetooth: hci3: command tx timeout [ 447.067710][T11170] team0: Port device team_slave_0 added [ 447.112215][T11170] team0: Port device team_slave_1 added [ 448.780014][T11170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.780035][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.780066][T11170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.840994][T11170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.841015][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.841047][T11170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.612808][T11170] hsr_slave_0: entered promiscuous mode [ 450.614460][T11170] hsr_slave_1: entered promiscuous mode [ 450.615513][T11170] debugfs: 'hsr0' already exists in 'hsr' [ 450.615541][T11170] Cannot create hsr debugfs directory [ 450.662297][T10966] veth0_vlan: entered promiscuous mode [ 450.780560][T10966] veth1_vlan: entered promiscuous mode [ 451.410374][T10966] veth0_macvtap: entered promiscuous mode [ 451.588734][T10966] veth1_macvtap: entered promiscuous mode [ 456.084578][T10966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.242610][T10966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.323846][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.325108][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.325574][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.327923][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.292983][ T9107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.293013][ T9107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.029872][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.029897][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.494584][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1694'. [ 467.462229][T11334] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1699'. [ 475.998340][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.466671][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.675405][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.831503][T11365] netlink: 'syz.0.1706': attribute type 39 has an invalid length. [ 476.871607][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.873014][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.979125][ T5797] Bluetooth: hci1: command tx timeout [ 479.330632][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 479.351817][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 479.369971][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 479.372402][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 479.377900][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 480.780031][T11361] chnl_net:caif_netlink_parms(): no params data found [ 481.059152][ T5800] Bluetooth: hci1: command tx timeout [ 481.242898][T11361] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.243117][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.243371][T11361] bridge_slave_0: entered allmulticast mode [ 481.246729][T11361] bridge_slave_0: entered promiscuous mode [ 481.306875][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.307006][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.307283][T11361] bridge_slave_1: entered allmulticast mode [ 481.375683][T11361] bridge_slave_1: entered promiscuous mode [ 482.359833][ T5800] Bluetooth: hci5: command tx timeout [ 484.132243][ T5797] Bluetooth: hci1: command tx timeout [ 484.226481][T11361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.265790][T11361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.415087][T11361] team0: Port device team_slave_0 added [ 484.426953][ T5797] Bluetooth: hci5: command tx timeout [ 484.447298][T11361] team0: Port device team_slave_1 added [ 484.447779][T11379] chnl_net:caif_netlink_parms(): no params data found [ 486.190437][ T5797] Bluetooth: hci1: command tx timeout [ 486.499308][ T5797] Bluetooth: hci5: command tx timeout [ 487.527088][T11361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.527112][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.527149][T11361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.653412][T11361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.653433][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.653466][T11361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.013497][ T5797] Bluetooth: hci5: command tx timeout [ 489.076386][T11361] hsr_slave_0: entered promiscuous mode [ 489.077758][T11361] hsr_slave_1: entered promiscuous mode [ 489.078453][T11361] debugfs: 'hsr0' already exists in 'hsr' [ 489.078472][T11361] Cannot create hsr debugfs directory [ 489.247918][ T5869] IPVS: starting estimator thread 0... [ 489.301963][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.302116][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.302523][T11379] bridge_slave_0: entered allmulticast mode [ 489.305885][T11379] bridge_slave_0: entered promiscuous mode [ 489.350677][T11415] IPVS: using max 6 ests per chain, 14400 per kthread [ 490.189684][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.189824][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.190235][T11379] bridge_slave_1: entered allmulticast mode [ 490.193228][T11379] bridge_slave_1: entered promiscuous mode [ 490.352821][T11379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.380345][T11379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.491884][T11379] team0: Port device team_slave_0 added [ 492.023866][T11379] team0: Port device team_slave_1 added [ 492.884515][ T5800] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 492.913686][ T5800] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 492.963550][ T5800] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 492.994697][ T5800] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 492.996819][ T5800] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 493.626758][T11379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.626776][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.626797][T11379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.650190][T11379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.650213][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.650247][T11379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.122956][T11379] hsr_slave_0: entered promiscuous mode [ 494.124059][T11379] hsr_slave_1: entered promiscuous mode [ 494.124827][T11379] debugfs: 'hsr0' already exists in 'hsr' [ 494.124847][T11379] Cannot create hsr debugfs directory [ 495.459232][ T5800] Bluetooth: hci8: command tx timeout [ 497.205206][T11443] chnl_net:caif_netlink_parms(): no params data found [ 497.539911][ T5800] Bluetooth: hci8: command tx timeout [ 499.113616][T11443] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.115328][T11443] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.115768][T11443] bridge_slave_0: entered allmulticast mode [ 499.153158][T11443] bridge_slave_0: entered promiscuous mode [ 499.182717][T11443] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.182957][T11443] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.183326][T11443] bridge_slave_1: entered allmulticast mode [ 499.188243][T11443] bridge_slave_1: entered promiscuous mode [ 499.283768][T11443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.302257][T11443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.367855][T11443] team0: Port device team_slave_0 added [ 499.381415][T11443] team0: Port device team_slave_1 added [ 499.444611][T11443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.444635][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.444666][T11443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.447419][T11443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.447438][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.447470][T11443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.619095][ T5800] Bluetooth: hci8: command tx timeout [ 500.728662][ T5797] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 500.752220][ T5797] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 500.753703][ T5797] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 500.788001][ T5797] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 500.808035][ T5797] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 501.805495][ T5800] Bluetooth: hci8: command tx timeout [ 502.506237][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.506317][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.050796][ T5797] Bluetooth: hci9: command tx timeout [ 505.059677][ T5797] Bluetooth: hci9: command tx timeout [ 506.495016][T11443] hsr_slave_0: entered promiscuous mode [ 506.496982][T11443] hsr_slave_1: entered promiscuous mode [ 506.498430][T11443] debugfs: 'hsr0' already exists in 'hsr' [ 506.498461][T11443] Cannot create hsr debugfs directory [ 506.850237][T11497] kAFS: unable to lookup cell '(' [ 507.404390][ T5797] Bluetooth: hci9: command tx timeout [ 507.585688][T11497] kAFS: unable to lookup cell '(,c¾ûL' [ 509.461114][ T5797] Bluetooth: hci9: command tx timeout [ 509.585142][T11477] chnl_net:caif_netlink_parms(): no params data found [ 511.146732][T11477] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.147034][T11477] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.147342][T11477] bridge_slave_0: entered allmulticast mode [ 511.172165][T11477] bridge_slave_0: entered promiscuous mode [ 511.176224][T11477] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.176462][T11477] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.178452][T11477] bridge_slave_1: entered allmulticast mode [ 511.211548][T11477] bridge_slave_1: entered promiscuous mode [ 511.290152][T11477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.294759][T11477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.365506][T11477] team0: Port device team_slave_0 added [ 511.375784][T11477] team0: Port device team_slave_1 added [ 511.491110][T11477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.491142][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.491173][T11477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.510963][T11477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.510985][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.511017][T11477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.226286][T11477] hsr_slave_0: entered promiscuous mode [ 513.227895][T11477] hsr_slave_1: entered promiscuous mode [ 513.241457][T11477] debugfs: 'hsr0' already exists in 'hsr' [ 513.241488][T11477] Cannot create hsr debugfs directory [ 519.083248][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 524.184967][ T5800] Bluetooth: hci6: command 0x0406 tx timeout [ 524.500915][T11548] kAFS: unable to lookup cell '(' [ 524.524214][T11548] kAFS: unable to lookup cell '(,c¾ûL' [ 525.919326][T11553] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 525.928050][T11553] exFAT-fs (nullb0): invalid boot record signature [ 525.928095][T11553] exFAT-fs (nullb0): failed to read boot sector [ 525.928132][T11553] exFAT-fs (nullb0): failed to recognize exfat type [ 527.724354][T11559] IPv6: Can't replace route, no match found [ 527.736165][T11559] netlink: 'syz.9.1735': attribute type 61 has an invalid length. [ 528.207590][T11563] kAFS: unable to lookup cell '(,c¾ûL' [ 529.130643][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1737'. [ 529.274270][T11567] ./cgroup: Can't lookup blockdev [ 529.298989][ T5800] Bluetooth: hci7: command 0x0406 tx timeout [ 529.569631][T11569] sg_write: process 141 (syz.9.1739) changed security contexts after opening file descriptor, this is not allowed. [ 529.570917][ T37] audit: type=1326 audit(1773246197.591:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 529.571710][ T37] audit: type=1326 audit(1773246197.591:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 529.572242][ T37] audit: type=1326 audit(1773246197.591:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 529.572859][ T37] audit: type=1326 audit(1773246197.591:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 529.573160][ T37] audit: type=1326 audit(1773246197.591:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 529.573443][ T37] audit: type=1326 audit(1773246197.591:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 529.573921][ T37] audit: type=1326 audit(1773246197.591:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 529.574206][ T37] audit: type=1326 audit(1773246197.591:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 529.574475][ T37] audit: type=1326 audit(1773246197.591:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 529.574904][ T37] audit: type=1326 audit(1773246197.591:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.9.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7051ac799 code=0x7ffc0000 [ 532.552884][T11573] bridge1: entered promiscuous mode [ 532.566448][T11573] netlink: 'syz.9.1740': attribute type 10 has an invalid length. [ 534.517520][ T5800] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 534.535346][ T5800] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 534.536791][ T5800] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 534.565130][ T5800] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 534.565914][ T5800] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 536.659270][ T5800] Bluetooth: hci10: command tx timeout [ 537.373257][T11575] chnl_net:caif_netlink_parms(): no params data found [ 537.946915][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.947171][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.947471][T11575] bridge_slave_0: entered allmulticast mode [ 537.973112][T11575] bridge_slave_0: entered promiscuous mode [ 537.977094][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.977249][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.977558][T11575] bridge_slave_1: entered allmulticast mode [ 538.010067][T11575] bridge_slave_1: entered promiscuous mode [ 538.092495][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.114304][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.193924][T11575] team0: Port device team_slave_0 added [ 538.213228][T11575] team0: Port device team_slave_1 added [ 538.297914][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.297938][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.297969][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.374869][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.374892][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.374925][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.739817][ T5797] Bluetooth: hci10: command tx timeout [ 538.986058][ T60] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 539.007776][ T60] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 539.021778][ T60] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 539.023094][ T60] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 539.045488][ T60] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 539.539514][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 540.821728][ T5800] Bluetooth: hci10: command tx timeout [ 541.139318][ T5800] Bluetooth: hci11: command tx timeout [ 541.263830][T11575] hsr_slave_0: entered promiscuous mode [ 541.265475][T11575] hsr_slave_1: entered promiscuous mode [ 541.266536][T11575] debugfs: 'hsr0' already exists in 'hsr' [ 541.266564][T11575] Cannot create hsr debugfs directory [ 542.593989][T11584] chnl_net:caif_netlink_parms(): no params data found [ 542.899249][ T5800] Bluetooth: hci10: command tx timeout [ 543.219232][ T5800] Bluetooth: hci11: command tx timeout [ 544.993364][T11584] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.993564][T11584] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.993858][T11584] bridge_slave_0: entered allmulticast mode [ 544.997115][T11584] bridge_slave_0: entered promiscuous mode [ 545.036513][T11584] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.036740][T11584] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.037041][T11584] bridge_slave_1: entered allmulticast mode [ 545.061131][T11584] bridge_slave_1: entered promiscuous mode [ 545.300522][ T5800] Bluetooth: hci11: command tx timeout [ 545.689298][T11584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.697521][T11584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.180687][T11584] team0: Port device team_slave_0 added [ 547.379183][ T5800] Bluetooth: hci11: command tx timeout [ 547.871963][T11584] team0: Port device team_slave_1 added [ 548.010505][T11584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.010524][T11584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.010555][T11584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.013101][T11584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.013117][T11584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.013148][T11584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.287229][T11584] hsr_slave_0: entered promiscuous mode [ 548.311108][T11584] hsr_slave_1: entered promiscuous mode [ 548.312456][T11584] debugfs: 'hsr0' already exists in 'hsr' [ 548.312485][T11584] Cannot create hsr debugfs directory [ 548.483541][ T60] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 548.537566][ T60] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 548.555533][ T60] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 548.579452][ T60] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 548.622229][ T60] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 550.253926][T11596] chnl_net:caif_netlink_parms(): no params data found [ 550.487148][T11596] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.487393][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.488097][T11596] bridge_slave_0: entered allmulticast mode [ 550.519968][T11596] bridge_slave_0: entered promiscuous mode [ 550.543883][T11596] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.544126][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.544807][T11596] bridge_slave_1: entered allmulticast mode [ 550.547843][T11596] bridge_slave_1: entered promiscuous mode [ 550.663033][T11596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.682193][T11596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.742199][ T60] Bluetooth: hci12: command tx timeout [ 550.778681][T11596] team0: Port device team_slave_0 added [ 550.791412][T11596] team0: Port device team_slave_1 added [ 550.862816][T11596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.862839][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.862869][T11596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.865836][T11596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.865853][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.865885][T11596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.037746][T11596] hsr_slave_0: entered promiscuous mode [ 551.045551][T11596] hsr_slave_1: entered promiscuous mode [ 551.046745][T11596] debugfs: 'hsr0' already exists in 'hsr' [ 551.046773][T11596] Cannot create hsr debugfs directory [ 551.503660][ T5800] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 551.526723][ T5800] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 551.537209][ T5800] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 551.554137][ T5800] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 551.555022][ T5800] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 552.830016][ T60] Bluetooth: hci12: command tx timeout [ 553.619876][ T60] Bluetooth: hci13: command tx timeout [ 554.899830][ T60] Bluetooth: hci12: command tx timeout [ 555.699243][ T60] Bluetooth: hci13: command tx timeout [ 556.917554][T11607] chnl_net:caif_netlink_parms(): no params data found [ 556.979470][ T60] Bluetooth: hci12: command tx timeout [ 557.166712][T11607] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.167039][T11607] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.167346][T11607] bridge_slave_0: entered allmulticast mode [ 557.197659][T11607] bridge_slave_0: entered promiscuous mode [ 557.210647][T11607] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.210873][T11607] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.211209][T11607] bridge_slave_1: entered allmulticast mode [ 557.214343][T11607] bridge_slave_1: entered promiscuous mode [ 557.348584][T11607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.377765][T11607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.448456][T11607] team0: Port device team_slave_0 added [ 557.465208][T11607] team0: Port device team_slave_1 added [ 557.533564][T11607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.533587][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.533618][T11607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.536632][T11607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.536655][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.536688][T11607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.709600][T11607] hsr_slave_0: entered promiscuous mode [ 557.711379][T11607] hsr_slave_1: entered promiscuous mode [ 557.712544][T11607] debugfs: 'hsr0' already exists in 'hsr' [ 557.712573][T11607] Cannot create hsr debugfs directory [ 557.789937][ T60] Bluetooth: hci13: command tx timeout [ 559.078190][ T5800] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 559.102232][ T5800] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 559.104094][ T5800] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 559.105673][ T5800] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 559.107284][ T5800] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 559.859094][ T60] Bluetooth: hci13: command tx timeout [ 561.219862][ T60] Bluetooth: hci14: command tx timeout [ 562.905897][T11617] chnl_net:caif_netlink_parms(): no params data found [ 563.065754][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.065829][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.161739][T11617] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.161988][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.162247][T11617] bridge_slave_0: entered allmulticast mode [ 563.165238][T11617] bridge_slave_0: entered promiscuous mode [ 563.180962][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.181682][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.182578][T11617] bridge_slave_1: entered allmulticast mode [ 563.192901][T11617] bridge_slave_1: entered promiscuous mode [ 563.300523][ T5800] Bluetooth: hci14: command tx timeout [ 563.303296][T11617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.308682][T11617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.406497][T11617] team0: Port device team_slave_0 added [ 563.411996][T11617] team0: Port device team_slave_1 added [ 563.499549][T11617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.499569][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.499600][T11617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.502230][T11617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.502246][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.502276][T11617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.661558][T11617] hsr_slave_0: entered promiscuous mode [ 563.663305][T11617] hsr_slave_1: entered promiscuous mode [ 563.664498][T11617] debugfs: 'hsr0' already exists in 'hsr' [ 563.664525][T11617] Cannot create hsr debugfs directory [ 565.139425][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 565.379633][ T5800] Bluetooth: hci14: command tx timeout [ 567.459129][ T60] Bluetooth: hci14: command tx timeout [ 579.060692][ T38] INFO: task kworker/u8:7:157 blocked for more than 143 seconds. [ 579.060737][ T38] Tainted: G L syzkaller #0 [ 579.060751][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.060762][ T38] task:kworker/u8:7 state:D stack:21536 pid:157 tgid:157 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 579.060830][ T38] Workqueue: netns cleanup_net [ 579.061034][ T38] Call Trace: [ 579.061047][ T38] [ 579.061064][ T38] __schedule+0x1553/0x5240 [ 579.061224][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 579.061340][ T38] ? __pfx___schedule+0x10/0x10 [ 579.061388][ T38] rt_mutex_schedule+0x76/0xf0 [ 579.061430][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 579.061475][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 579.061503][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 579.061530][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 579.061575][ T38] ? rcu_barrier+0x4c/0x580 [ 579.061619][ T38] ? rcu_barrier+0x4c/0x580 [ 579.061645][ T38] mutex_lock_nested+0x168/0x1d0 [ 579.061668][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 579.061699][ T38] rcu_barrier+0x4c/0x580 [ 579.061737][ T38] netdev_run_todo+0x2e0/0xde0 [ 579.061826][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 579.061859][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 579.061970][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 579.062044][ T38] ? nsim_destroy+0x38d/0x680 [ 579.062173][ T38] nsim_destroy+0x3ae/0x680 [ 579.062214][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 579.062255][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 579.062300][ T38] nsim_dev_reload_down+0x8a/0xc0 [ 579.062336][ T38] devlink_reload+0x1d1/0x8e0 [ 579.062446][ T38] ? __pfx_devlink_reload+0x10/0x10 [ 579.062472][ T38] ? xa_get_mark+0x6fc/0x7b0 [ 579.062545][ T38] devlink_pernet_pre_exit+0x1e6/0x3f0 [ 579.062574][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 579.062609][ T38] ? class_remove_file_ns+0x124/0x160 [ 579.062694][ T38] ops_undo_list+0x187/0x940 [ 579.062728][ T38] ? rt_spin_unlock+0x1f0/0x200 [ 579.062755][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 579.062782][ T38] ? rt_spin_unlock+0x14f/0x200 [ 579.062810][ T38] ? idr_destroy+0x21b/0x2a0 [ 579.062868][ T38] ? rt_spin_unlock+0x160/0x200 [ 579.062897][ T38] cleanup_net+0x56e/0x800 [ 579.062931][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 579.062969][ T38] ? process_scheduled_works+0xa25/0x1830 [ 579.063001][ T38] ? process_scheduled_works+0xa25/0x1830 [ 579.063035][ T38] process_scheduled_works+0xb02/0x1830 [ 579.063107][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 579.063147][ T38] ? assign_work+0x3d5/0x5e0 [ 579.063185][ T38] worker_thread+0xa50/0xfc0 [ 579.063248][ T38] kthread+0x388/0x470 [ 579.063274][ T38] ? __pfx_worker_thread+0x10/0x10 [ 579.063306][ T38] ? __pfx_kthread+0x10/0x10 [ 579.063332][ T38] ret_from_fork+0x51e/0xb90 [ 579.063386][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 579.063418][ T38] ? __switch_to+0xc7d/0x1450 [ 579.063473][ T38] ? __pfx_kthread+0x10/0x10 [ 579.063499][ T38] ret_from_fork_asm+0x1a/0x30 [ 579.063557][ T38] [ 579.063752][ T38] INFO: task syz.3.1551:10278 blocked for more than 143 seconds. [ 579.063774][ T38] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 579.063787][ T38] Blocked by coredump. [ 579.063793][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.063804][ T38] task:syz.3.1551 state:D stack:24120 pid:10278 tgid:10278 ppid:5802 task_flags:0x40044c flags:0x00080003 [ 579.063872][ T38] Call Trace: [ 579.063879][ T38] [ 579.063894][ T38] __schedule+0x1553/0x5240 [ 579.063930][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 579.063959][ T38] ? rcu_is_watching+0x15/0xb0 [ 579.063995][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 579.064020][ T38] ? __pfx___schedule+0x10/0x10 [ 579.064074][ T38] rt_mutex_schedule+0x76/0xf0 [ 579.064103][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 579.064149][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 579.064178][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 579.064204][ T38] ? __pfx_rt_mutex_slowloc[ 579.064204][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 579.064250][ T38] ? rcu_barrier+0x4c/0x580 [ 579.064289][ T38] ? rcu_barrier+0x4c/0x580 [ 579.064315][ T38] mutex_lock_nested+0x168/0x1d0 [ 579.064339][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 579.064370][ T38] rcu_barrier+0x4c/0x580 [ 579.064410][ T38] netdev_run_todo+0x2e0/0xde0 [ 579.064452][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 579.064487][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 579.064520][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 579.064560][ T38] ? netdev_state_change+0x1ca/0x220 [ 579.064592][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 579.064702][ T38] tun_chr_close+0x13f/0x1c0 [ 579.064733][ T38] __fput+0x461/0xa90 [ 579.064808][ T38] task_work_run+0x1d9/0x270 [ 579.064839][ T38] ? __pfx_task_work_run+0x10/0x10 [ 579.064866][ T38] ? kmem_cache_free+0x185/0x6b0 [ 579.064962][ T38] ? put_net+0x191/0x260 [ 579.065000][ T38] do_exit+0x70f/0x23c0 [ 579.065041][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 579.065108][ T38] ? __pfx_do_exit+0x10/0x10 [ 579.065130][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 579.065156][ T38] ? reacquire_held_locks+0x104/0x190 [ 579.065182][ T38] ? rt_spin_lock+0x1e0/0x400 [ 579.065221][ T38] do_group_exit+0x21b/0x2d0 [ 579.065247][ T38] ? rt_spin_unlock+0x160/0x200 [ 579.065276][ T38] get_signal+0x125c/0x1310 [ 579.065332][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 579.065367][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 579.065420][ T38] exit_to_user_mode_loop+0x86/0x480 [ 579.065474][ T38] ? rcu_is_watching+0x15/0xb0 [ 579.065504][ T38] do_syscall_64+0x32d/0xf80 [ 579.065534][ T38] ? trace_irq_disable+0x3b/0x150 [ 579.065569][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.065610][ T38] ? clear_bhb_loop+0x40/0x90 [ 579.065640][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.065665][ T38] RIP: 0033:0x7fdc424bc799 [ 579.065692][ T38] RSP: 002b:00007ffcf1456b78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 579.065745][ T38] RAX: 0000000000000000 RBX: 00007ffcf1456c60 RCX: 00007fdc424bc799 [ 579.065761][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 579.065776][ T38] RBP: 000000000005e05c R08: 0000000000000001 R09: 0000000000000000 [ 579.065790][ T38] R10: 0000001b2e020000 R11: 0000000000000246 R12: 00007ffcf1456ca0 [ 579.065806][ T38] R13: 00007fdc42735fac R14: 000000000005e0ac R15: 00007fdc42735fa0 [ 579.065844][ T38] [ 579.065871][ T38] INFO: task syz.7.1647:11076 blocked for more than 143 seconds. [ 579.065891][ T38] Tainted: G L syzkaller #0 [ 579.065903][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.065913][ T38] task:syz.7.1647 state:D stack:23808 pid:11076 tgid:11074 ppid:10866 task_flags:0x400140 flags:0x00080002 [ 579.065978][ T38] Call Trace: [ 579.065986][ T38] [ 579.066000][ T38] __schedule+0x1553/0x5240 [ 579.066035][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 579.066082][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 579.066108][ T38] ? __pfx___schedule+0x10/0x10 [ 579.066155][ T38] rt_mutex_schedule+0x76/0xf0 [ 579.066184][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 579.066230][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 579.066258][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 579.066284][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 579.066330][ T38] ? rcu_barrier+0x4c/0x580 [ 579.066365][ T38] ? rcu_barrier+0x4c/0x580 [ 579.066390][ T38] mutex_lock_nested+0x168/0x1d0 [ 579.066414][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 579.066445][ T38] rcu_barrier+0x4c/0x580 [ 579.066483][ T38] netdev_run_todo+0x2e0/0xde0 [ 579.066526][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 579.066562][ T38] ? rtnl_newlink+0x8a1/0x1be0 [ 579.066648][ T38] rtnl_newlink+0x16c7/0x1be0 [ 579.066675][ T38] ? kasan_save_track+0x3e/0x80 [ 579.066722][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 579.066776][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 579.066808][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 579.066839][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 579.066873][ T38] ? kmem_cache_free+0x185/0x6b0 [ 579.066908][ T38] ? nlmon_xmit+0xb0/0x100 [ 579.066990][ T38] ? __local_bh_enable+0x1e1/0x2f0 [ 579.067026][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 579.067054][ T38] ? __dev_queue_xmit+0x27d/0x39b0 [ 579.067102][ T38] ? __dev_queue_xmit+0x1ebb/0x39b0 [ 579.067135][ T38] ? netlink_unicast+0x805/0x9f0 [ 579.067202][ T38] ? netlink_sendmsg+0x813/0xb40 [ 579.067254][ T38] ? ____sys_sendmsg+0x94c/0x9c0 [ 579.067360][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 579.067387][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 579.067421][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 579.067448][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.067474][ T38] ? ref_tracker_free+0x673/0x820 [ 579.067583][ T38] ? __copy_skb_header+0xa3/0x4a0 [ 579.067642][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 579.067680][ T38] netlink_rcv_skb+0x232/0x4b0 [ 579.067709][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.067740][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.067780][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 579.067817][ T38] netlink_unicast+0x831/0x9f0 [ 579.067851][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 579.067878][ T38] ? netlink_sendmsg+0x650/0xb40 [ 579.067904][ T38] ? skb_put+0x11b/0x210 [ 579.067939][ T38] netlink_sendmsg+0x813/0xb40 [ 579.067978][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.068016][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 579.068116][ T38] ____sys_sendmsg+0x94c/0x9c0 [ 579.068158][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.068203][ T38] ? import_iovec+0x73/0xa0 [ 579.068289][ T38] ___sys_sendmsg+0x2a5/0x360 [ 579.068329][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.068372][ T38] ? futex_wait+0x29a/0x380 [ 579.068438][ T38] ? __fget_files+0x2a/0x420 [ 579.068518][ T38] ? __fget_files+0x3a6/0x420 [ 579.068559][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 579.068597][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.068641][ T38] ? rcu_is_watching+0x15/0xb0 [ 579.068680][ T38] do_syscall_64+0x14d/0xf80 [ 579.068711][ T38] ? trace_irq_disable+0x3b/0x150 [ 579.068739][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.068763][ T38] ? clear_bhb_loop+0x40/0x90 [ 579.068793][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.519059][ T38] RIP: 0033:0x7f739ef3c799 [ 579.519091][ T38] RSP: 002b:00007f739d175028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.519116][ T38] RAX: ffffffffffffffda RBX: 00007f739f1b6090 RCX: 00007f739ef3c799 [ 579.519133][ T38] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 579.519146][ T38] RBP: 00007f739efd2c99 R08: 0000000000000000 R09: 0000000000000000 [ 579.519160][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.519174][ T38] R13: 00007f739f1b6128 R14: 00007f739f1b6090 R15: 00007ffc487966b8 [ 579.519211][ T38] [ 579.519279][ T38] [ 579.519279][ T38] Showing all locks held in the system: [ 579.519290][ T38] 2 locks held by kworker/u8:1/13: [ 579.519369][ T38] #0: ffff88801eb84138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 579.519453][ T38] #1: ffffc90000127c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 579.519516][ T38] 4 locks held by pr/legacy/17: [ 579.519531][ T38] 4 locks held by rcuc/1/28: [ 579.519550][ T38] 4 locks held by ksoftirqd/1/30: [ 579.519565][ T38] 1 lock held by khungtaskd/38: [ 579.519578][ T38] #0: ffffffff8ddcb880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 579.519648][ T38] 6 locks held by kworker/u8:7/157: [ 579.519661][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 579.519723][ T38] #1: ffffc90003b57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 579.519784][ T38] #2: ffffffff8f14b840 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 579.519845][ T38] #3: ffff88805d2fb0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 579.519902][ T38] #4: ffff88805d308300 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 579.519969][ T38] #5: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 579.520049][ T38] 1 lock held by klogd/5150: [ 579.520063][ T38] 2 locks held by dhcpcd/5455: [ 579.520075][ T38] 2 locks held by dhcpcd/5456: [ 579.520088][ T38] 2 locks held by getty/5553: [ 579.520100][ T38] #0: ffff88803738f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 579.520210][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 579.520299][ T38] 4 locks held by syz-executor/5780: [ 579.520323][ T38] 2 locks held by kworker/u8:18/8510: [ 579.520337][ T38] #0: ffff88801eb84138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 579.520398][ T38] #1: ffffc900060dfc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 579.520461][ T38] 2 locks held by kworker/u8:24/9105: [ 579.520474][ T38] #0: ffff88801eb84138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 579.520536][ T38] #1: ffffc9000db87c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 579.520608][ T38] 1 lock held by syz.3.1551/10278: [ 579.520622][ T38] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 579.520679][ T38] 1 lock held by syz.5.1573/10328: [ 579.520691][ T38] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 579.520752][ T38] 1 lock held by syz.6.1606/10922: [ 579.520765][ T38] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 579.520837][ T38] 7 locks held by syz-executor/11065: [ 579.520850][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.520956][ T38] #1: ffff88803abee478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.521087][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.521154][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.521246][ T38] #4: ffff88805cc820d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 579.521301][ T38] #5: ffff888024f64300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 579.521372][ T38] #6: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 579.521429][ T38] 2 locks held by syz.7.1647/11076: [ 579.521443][ T38] #0: ffffffff8e886ba8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 579.521509][ T38] #1: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 579.521575][ T38] 4 locks held by syz-executor/11170: [ 579.521588][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.521655][ T38] #1: ffff8880524c7478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.521717][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.521786][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.521848][ T38] 1 lock held by syz.8.1694/11322: [ 579.521861][ T38] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 579.521918][ T38] 4 locks held by syz-executor/11361: [ 579.521931][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.521998][ T38] #1: ffff88803feeb078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.522061][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.522131][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.522193][ T38] 1 lock held by syz.0.1706/11365: [ 579.522206][ T38] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 579.522264][ T38] 4 locks held by syz-executor/11379: [ 579.522277][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.522349][ T38] #1: ffff88805f431c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.522411][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.522486][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.522567][ T38] 4 locks held by syz-executor/11443: [ 579.522581][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.522653][ T38] #1: ffff88803c04f478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.522717][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.522784][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.522847][ T38] 4 locks held by syz-executor/11477: [ 579.522860][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.522926][ T38] #1: ffff88805bb51078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.522990][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.523059][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.523143][ T38] 1 lock held by syz.9.1740/11573: [ 579.523155][ T38] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 579.523212][ T38] 4 locks held by syz-executor/11575: [ 579.523225][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.523291][ T38] #1: ffff888070f41478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.523354][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.523423][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.523485][ T38] 4 locks held by syz-executor/11584: [ 579.523499][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.523572][ T38] #1: ffff888043adbc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.523635][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.523702][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.523763][ T38] 4 locks held by syz-executor/11596: [ 579.523775][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.523842][ T38] #1: ffff88806e825878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.523903][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.523978][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.524040][ T38] 4 locks held by syz-executor/11607: [ 579.524053][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.524124][ T38] #1: ffff8880324ac478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.524188][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.524258][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.524320][ T38] 4 locks held by syz-executor/11617: [ 579.524333][ T38] #0: ffff888037776480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 579.524398][ T38] #1: ffff88808fe6a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 579.524460][ T38] #2: ffff8880293dac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 579.524529][ T38] #3: ffffffff8e9c78b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 579.524597][ T38] [ 579.524603][ T38] ============================================= [ 579.524603][ T38] [ 579.524621][ T38] NMI backtrace for cpu 0 [ 579.524650][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 579.524681][ T38] Tainted: [L]=SOFTLOCKUP [ 579.524689][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 579.524702][ T38] Call Trace: [ 579.524711][ T38] [ 579.524721][ T38] dump_stack_lvl+0xe8/0x150 [ 579.524756][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 579.524783][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 579.524817][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 579.524845][ T38] sys_info+0x135/0x170 [ 579.524878][ T38] watchdog+0xfd9/0x1030 [ 579.524912][ T38] ? watchdog+0x21a/0x1030 [ 579.524949][ T38] kthread+0x388/0x470 [ 579.524974][ T38] ? __pfx_watchdog+0x10/0x10 [ 579.524999][ T38] ? __pfx_kthread+0x10/0x10 [ 579.525022][ T38] ret_from_fork+0x51e/0xb90 [ 579.525057][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 579.525087][ T38] ? __switch_to+0xc7d/0x1450 [ 579.525120][ T38] ? __pfx_kthread+0x10/0x10 [ 579.525144][ T38] ret_from_fork_asm+0x1a/0x30 [ 579.525184][ T38] [ 579.525193][ T38] Sending NMI from CPU 0 to CPUs 1: [ 579.525226][ C1] NMI backtrace for cpu 1 [ 579.525244][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 579.525270][ C1] Tainted: [L]=SOFTLOCKUP [ 579.525276][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 579.525288][ C1] RIP: 0010:unwind_next_frame+0x13d0/0x23c0 [ 579.525310][ C1] Code: 32 c1 ee 04 83 e6 0f 83 fe 04 0f 84 ae 04 00 00 83 fe 01 0f 84 5d 04 00 00 85 f6 0f 85 40 06 00 00 48 8b 44 24 38 80 3c 28 00 <74> 08 4c 89 e7 e8 56 f1 b3 00 49 8b 3c 24 48 85 ff 0f 84 e7 04 00 [ 579.525326][ C1] RSP: 0018:ffffc90000a2f578 EFLAGS: 00000246 [ 579.525342][ C1] RAX: 1ffff92000145ed3 RBX: ffffc90000a2f680 RCX: 0000000000000000 [ 579.525356][ C1] RDX: ffffffff9004f496 RSI: 0000000000000000 RDI: ffffc90000a2f6a8 [ 579.525369][ C1] RBP: dffffc0000000000 R08: ffffc90000a2f6a7 R09: 0000000000000000 [ 579.525382][ C1] R10: ffffc90000a2f698 R11: fffff52000145ed5 R12: ffffc90000a2f698 [ 579.525397][ C1] R13: 1ffff92000145ecb R14: ffffc90000a2f648 R15: 1ffffffff2009e92 [ 579.525412][ C1] FS: 0000000000000000(0000) GS:ffff88812643f000(0000) knlGS:0000000000000000 [ 579.525427][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.525439][ C1] CR2: 000055a9910d54b0 CR3: 000000003d7f6000 CR4: 00000000003526f0 [ 579.525456][ C1] Call Trace: [ 579.525462][ C1] [ 579.525474][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 579.525492][ C1] ? kasan_save_free_info+0x46/0x50 [ 579.525517][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 579.525544][ C1] arch_stack_walk+0x11b/0x150 [ 579.525565][ C1] ? __kasan_slab_free+0x5c/0x80 [ 579.525595][ C1] stack_trace_save+0xa9/0x100 [ 579.525619][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 579.525646][ C1] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 579.525672][ C1] kasan_save_track+0x3e/0x80 [ 579.525697][ C1] ? kasan_save_track+0x3e/0x80 [ 579.525721][ C1] ? kasan_save_free_info+0x46/0x50 [ 579.525772][ C1] kasan_save_free_info+0x46/0x50 [ 579.525793][ C1] __kasan_slab_free+0x5c/0x80 [ 579.525819][ C1] kfree+0x1c1/0x6c0 [ 579.525844][ C1] ? ref_tracker_free+0x509/0x820 [ 579.525868][ C1] ref_tracker_free+0x509/0x820 [ 579.525887][ C1] ? rt_spin_lock+0x1e0/0x400 [ 579.525906][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 579.525926][ C1] ? dst_destroy+0x10f/0x350 [ 579.526007][ C1] ? rcu_cpu_kthread+0x99e/0x1470 [ 579.526024][ C1] ? smpboot_thread_fn+0x541/0xa50 [ 579.526058][ C1] ? kthread+0x388/0x470 [ 579.526075][ C1] ? ret_from_fork+0x51e/0xb90 [ 579.526099][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 579.526120][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 579.526149][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 579.526210][ C1] dst_destroy+0x10f/0x350 [ 579.526237][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 579.526267][ C1] rcu_cpu_kthread+0x99e/0x1470 [ 579.526289][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 579.526312][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 579.526328][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 579.526350][ C1] ? preempt_schedule_common+0x82/0xd0 [ 579.526378][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 579.526405][ C1] smpboot_thread_fn+0x541/0xa50 [ 579.526434][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 579.526467][ C1] kthread+0x388/0x470 [ 579.526486][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 579.526513][ C1] ? __pfx_kthread+0x10/0x10 [ 579.526532][ C1] ret_from_fork+0x51e/0xb90 [ 579.526560][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 579.526584][ C1] ? __switch_to+0xc7d/0x1450 [ 579.526608][ C1] ? __pfx_kthread+0x10/0x10 [ 579.526626][ C1] ret_from_fork_asm+0x1a/0x30 [ 579.526653][ C1] [ 579.527233][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 579.527252][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 579.527281][ T38] Tainted: [L]=SOFTLOCKUP [ 579.527289][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 579.527301][ T38] Call Trace: [ 579.527310][ T38] [ 579.527318][ T38] vpanic+0x56c/0xa60 [ 579.527359][ T38] ? __pfx_vpanic+0x10/0x10 [ 579.527404][ T38] panic+0xc5/0xd0 [ 579.527436][ T38] ? __pfx_panic+0x10/0x10 [ 579.527466][ T38] ? printk_trigger_flush+0x117/0x180 [ 579.527500][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 579.527539][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 579.527576][ T38] watchdog+0x1023/0x1030 [ 579.527609][ T38] ? watchdog+0x21a/0x1030 [ 579.527644][ T38] kthread+0x388/0x470 [ 579.527669][ T38] ? __pfx_watchdog+0x10/0x10 [ 579.527695][ T38] ? __pfx_kthread+0x10/0x10 [ 579.527719][ T38] ret_from_fork+0x51e/0xb90 [ 579.527754][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 579.527784][ T38] ? __switch_to+0xc7d/0x1450 [ 579.527815][ T38] ? __pfx_kthread+0x10/0x10 [ 579.527840][ T38] ret_from_fork_asm+0x1a/0x30 [ 579.527878][ T38] [ 579.528588][ T38] Kernel Offset: disabled