last executing test programs: 19m36.402570843s ago: executing program 32 (id=6): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000340)) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r6, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x480d0}, 0x40090) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x1d}, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7) keyctl$set_timeout(0xf, r8, 0xfffff49f) 18m28.643827589s ago: executing program 33 (id=64): socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0xb6, &(0x7f0000000bc0)=""/182, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) getrlimit(0xb, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, 0x0) 17m33.711353049s ago: executing program 34 (id=109): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffd, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000065000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r1, 0x1, 0x460e, 0x1) 15m19.116005471s ago: executing program 35 (id=186): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050014060a000a3d6e55ea9f"], 0x17) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 14m8.471734154s ago: executing program 36 (id=208): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 13m5.905188844s ago: executing program 37 (id=259): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) setresuid(r0, r0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0xd8}) mmap$IORING_OFF_CQ_RING(&(0x7f000003b000/0x2000)=nil, 0x2000, 0x4, 0x10, r1, 0x8000000) r2 = syz_clone(0x81088400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x12) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x18, 0x6, 0x0, @remote, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r8, 0x40026f34, &(0x7f0000000040)=0x1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000800", @ANYRES16=r3, @ANYBLOB="150b2abd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2600c8c0}, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) 12m7.972200201s ago: executing program 38 (id=308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x0, 0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001700)=""/4087, 0xff7}, {&(0x7f0000002700)=""/4073, 0xfe9}], 0x2}, 0x22020) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000380)={0x0, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0xfffffffe, 0x4, 0x0, 0xffff, 0x4, 0x549, 0xe910, 0x5, 0x9, 0x0, 0x6]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 9m11.076811404s ago: executing program 39 (id=393): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000aa3000/0x2000)=nil, 0x2000, 0x1000000, 0x28011, 0xffffffffffffffff, 0x53cec000) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8m18.638991803s ago: executing program 8 (id=437): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x4}, {}, {}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4, 0x8, 0x61, 0x1ff, 0x4, 0x5, 0x3, 0x7c, 0x202, 0x1, 0xd}) 8m18.10095072s ago: executing program 8 (id=440): syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x5, 0x1, 0x213}) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x53a895dfc65464bd) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0, 0x0, 0xfffffffe}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x100000001) syz_clone(0x10040880, &(0x7f0000000280)="1b8f9631eab7a5fadab0c4dfed298e0b87a869460da3d8b6df99086e6f31d5d983032d9f25487929804572363aaff93637008abb8f87cf1d60c2599ee93de5cfd3396e5ea1f50f834383ec8ad41ebd38e87537630717b96ef40348ef4a488848af2df4ed8b6a791e1e533564e19f5f8142bc75cb5c7b9fa4691dd8c05285dfbe8c2a04c08e3069989249a2c30e5357d606ae0a8b014169f77697bbc3ac9222246c4046b8633f63f544418225a96b8e78de71d7b7ff3e6481292fb706952201be9f724d4dc34b583b352701fef4387e24001bc73e2cea8b4b8b7dae945b6b07e52df89af7a59c2924294b16eaa9ba46b06998a2589d9aead4", 0xf8, &(0x7f0000000200), &(0x7f0000000380), &(0x7f00000003c0)="9af3e4a5044733ee47b3829cb3088d914147912f40f40e14d8baab60e18a1e4fb05f5b80513fc3a840acd840661be773b17ee1e9c268c7bf22d5e1a003e6ab955f25d6ffeb49dff000c09ad9733e67591e1f6979d84c16903412733cd3c723422447878134cfcca3382e43abaf1cb4658e1c73afc9dff9027a0d53be25ac701a2daa4400b53a823e8375dc6cff2c81eb38c6a08b6c212d") r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0xa241, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_raw(r1, &(0x7f0000019940)={&(0x7f0000000480)=@generic, 0x80, &(0x7f00000197c0)=[{&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000019580)=""/241, 0xf1}, {&(0x7f0000019680)=""/19, 0x13}, {&(0x7f00000196c0)=""/64, 0x40}, {&(0x7f0000019700)=""/164, 0xa4}], 0x5}, 0x80012042) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000}) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net/route\x00') pread64(r3, &(0x7f0000000580)=""/102400, 0x19000, 0xffff) 8m17.081803896s ago: executing program 8 (id=443): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 8m7.994868217s ago: executing program 8 (id=471): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @b={0x91, 0x3, 0x0, 0x1, 0x0, 0xb, 0xe, {}, 0x0, 0x3, 0x2, 0x0, 0x51, "729eb038141c4bdca69ba96554d39f43116193993d85ea7bded56da2c7fe89f1b70a6361e52552a455106778b298a5468d74ffd16886b0a6246b0ba581fc612912b4170d83c00777e41abc3521f7df8ed4"}}, 0x61) 8m6.97726801s ago: executing program 8 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x54) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x40000205, 0x8c01) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) ioprio_set$pid(0x3, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x5000, 0x0) io_setup(0x443, &(0x7f0000001100)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) eventfd(0xabc) 7m58.498404569s ago: executing program 8 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000007aac00000002000000300004802c000180090001007866726d000000001c000280080002400000000c050003005700000008000140000000100900010073797a30000000000900"], 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 7m55.869867086s ago: executing program 5 (id=488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x1, 0x2000089}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x207a98, 0x363, 0xc, 0x0, 0x0) 7m47.738304761s ago: executing program 5 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) 7m47.042080989s ago: executing program 5 (id=498): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) 7m46.51347536s ago: executing program 5 (id=499): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 7m45.912107262s ago: executing program 5 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x54) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x40000205, 0x8c01) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) ioprio_set$pid(0x3, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x5000, 0x0) io_setup(0x443, &(0x7f0000001100)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) eventfd(0xabc) 7m39.055201097s ago: executing program 40 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000007aac00000002000000300004802c000180090001007866726d000000001c000280080002400000000c050003005700000008000140000000100900010073797a30000000000900"], 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 7m38.714774693s ago: executing program 5 (id=505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x1, 0x2000089}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x207a98, 0x363, 0xc, 0x0, 0x0) 7m38.529883005s ago: executing program 9 (id=506): socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x8, @mcast1={0xff, 0x7}, 0x1fffd}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(0xffffffffffffffff) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 7m37.666665526s ago: executing program 9 (id=508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) 7m36.931490794s ago: executing program 9 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x22, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x8}}, 0x30) 7m35.922828753s ago: executing program 9 (id=512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 7m34.430734731s ago: executing program 9 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x54) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x40000205, 0x8c01) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) ioprio_set$pid(0x3, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x5000, 0x0) io_setup(0x443, &(0x7f0000001100)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) eventfd(0xabc) 7m26.900677938s ago: executing program 9 (id=516): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x2d, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x7, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x8000, 0xf65, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m19.955595574s ago: executing program 41 (id=505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x1, 0x2000089}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x207a98, 0x363, 0xc, 0x0, 0x0) 7m7.925610082s ago: executing program 42 (id=516): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x2d, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x7, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x8000, 0xf65, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m43.533991487s ago: executing program 1 (id=805): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3m42.880892344s ago: executing program 1 (id=808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3m42.168729299s ago: executing program 1 (id=812): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m40.653312244s ago: executing program 1 (id=818): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000100)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x4, 0x0, 0x2080, {0x8080000, 0xffffffffffffffff, {}, 0x0, 0xff}, {"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", "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"}}) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x401e, 0x420c, 0xfffffffffffff62c, 0x6001}}], 0x68}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m39.646249185s ago: executing program 1 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc1) 3m39.035855075s ago: executing program 1 (id=826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x1, 'nq\x00', 0x8, 0x5, 0x29}, {@remote, 0x4e22, 0x0, 0x7, 0x100, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x102) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000b00)={0x0, 0x0, @ioapic={0x6000, 0x4, 0x3, 0x5, 0x0, [{0x7f, 0xfb, 0xa, '\x00', 0x71}, {0xd8, 0x0, 0x1}, {0x5, 0x6, 0x2, '\x00', 0x2}, {0x8, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x5, 0x5, '\x00', 0xd}, {0x1, 0x0, 0x2, '\x00', 0xf9}, {0x9, 0x9, 0x9, '\x00', 0xf}, {0x9, 0x5, 0x55, '\x00', 0x6a}, {0x5, 0x2, 0xf8, '\x00', 0x7f}, {0x0, 0xb3, 0x66, '\x00', 0x9}, {0x7, 0x6, 0x7f}, {0x0, 0x1, 0x9, '\x00', 0x7}, {0xff, 0xb, 0x0, '\x00', 0x7}, {0x0, 0x9, 0x2, '\x00', 0x8}, {0x0, 0x7, 0x8, '\x00', 0x4}, {0x5, 0x2, 0x5, '\x00', 0xf}, {0x3, 0x8, 0x80, '\x00', 0x6}, {0x1, 0x7, 0x4, '\x00', 0x3}, {0x7c, 0x6e, 0x5, '\x00', 0x76}, {0x0, 0x6, 0x2, '\x00', 0x7}, {0x80, 0x7, 0x5}, {0x3, 0x4, 0x4, '\x00', 0xf0}, {0x38, 0x6, 0x2, '\x00', 0x1}, {0x5, 0x9, 0xfd, '\x00', 0x24}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 3m24.752635883s ago: executing program 3 (id=856): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x2d, [0xfffffff6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x4, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x100000, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x7, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0xfffffffe, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x8000, 0xf65, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x8000, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m23.205591199s ago: executing program 43 (id=826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x1, 'nq\x00', 0x8, 0x5, 0x29}, {@remote, 0x4e22, 0x0, 0x7, 0x100, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x102) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000b00)={0x0, 0x0, @ioapic={0x6000, 0x4, 0x3, 0x5, 0x0, [{0x7f, 0xfb, 0xa, '\x00', 0x71}, {0xd8, 0x0, 0x1}, {0x5, 0x6, 0x2, '\x00', 0x2}, {0x8, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x5, 0x5, '\x00', 0xd}, {0x1, 0x0, 0x2, '\x00', 0xf9}, {0x9, 0x9, 0x9, '\x00', 0xf}, {0x9, 0x5, 0x55, '\x00', 0x6a}, {0x5, 0x2, 0xf8, '\x00', 0x7f}, {0x0, 0xb3, 0x66, '\x00', 0x9}, {0x7, 0x6, 0x7f}, {0x0, 0x1, 0x9, '\x00', 0x7}, {0xff, 0xb, 0x0, '\x00', 0x7}, {0x0, 0x9, 0x2, '\x00', 0x8}, {0x0, 0x7, 0x8, '\x00', 0x4}, {0x5, 0x2, 0x5, '\x00', 0xf}, {0x3, 0x8, 0x80, '\x00', 0x6}, {0x1, 0x7, 0x4, '\x00', 0x3}, {0x7c, 0x6e, 0x5, '\x00', 0x76}, {0x0, 0x6, 0x2, '\x00', 0x7}, {0x80, 0x7, 0x5}, {0x3, 0x4, 0x4, '\x00', 0xf0}, {0x38, 0x6, 0x2, '\x00', 0x1}, {0x5, 0x9, 0xfd, '\x00', 0x24}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 3m23.091782632s ago: executing program 3 (id=861): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, 0x0, 0x0, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3m21.344007228s ago: executing program 3 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m20.670735431s ago: executing program 3 (id=869): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) 3m19.918863239s ago: executing program 3 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x54) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x40000205, 0x8c01) fcntl$dupfd(r5, 0x406, r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x5000, 0x0) io_setup(0x443, &(0x7f0000001100)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) eventfd(0xabc) 3m14.612853824s ago: executing program 3 (id=872): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x2d, [0xfffffff6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x4, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x100000, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x7, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0xfffffffe, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x8000, 0xf65, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x8000, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m58.826767746s ago: executing program 44 (id=872): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x2d, [0xfffffff6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x4, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x100000, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x7, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0xfffffffe, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x8000, 0xf65, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x8000, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m0.911347517s ago: executing program 0 (id=1008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r4, 0x2, 0x13, r3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m59.775479301s ago: executing program 0 (id=1011): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='.A'], 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m59.196151795s ago: executing program 0 (id=1013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b1, 0x0, 0x5}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m57.959780294s ago: executing program 0 (id=1016): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m55.296197532s ago: executing program 0 (id=1025): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0x4}, {0x0, 0x5}, {0xd}]}]}}, &(0x7f00000005c0)=""/240, 0x46, 0xf0, 0x1}, 0x28) 1m54.674074247s ago: executing program 0 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) 1m45.363618026s ago: executing program 2 (id=1035): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x2d, [0xfffffff6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x4, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x100000, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x7, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0xfffffffe, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x8000, 0xf65, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x8000, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m44.009153832s ago: executing program 2 (id=1038): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x80c, 0x3, 0xf3, 0x7, 0x0, 0x10, 0x3, 0xe9, 0x1, 0x9, 0x4, 0x6}, {0x8, 0x6, 0xa, 0xc1, 0x4, 0x80, 0x47, 0xf1, 0x8, 0x8b, 0x44, 0x7d, 0x3fffffffffe}, {0x7fffffff, 0x8, 0x1, 0x0, 0x4, 0x5, 0x8, 0xf8, 0x5, 0x6, 0x3, 0x3, 0x4}], 0x16d3}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f010400000008000000000624"], 0x0) 1m42.296922423s ago: executing program 4 (id=1040): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44080) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m41.908587062s ago: executing program 2 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x54) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x40000205, 0x8c01) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) ioprio_set$pid(0x3, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x5000, 0x0) io_setup(0x443, &(0x7f0000001100)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) eventfd(0xabc) 1m38.504504049s ago: executing program 45 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) 1m38.465560748s ago: executing program 4 (id=1043): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0xe2bb, 0x2, 0x403, 0x3b7}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) r4 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x2, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000000), 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') execveat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000280)='/dev/i2c-#\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='%(\x00']}, &(0x7f0000000380), 0x1000) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00'}, 0x18) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x8}, 0x8) 1m37.754313818s ago: executing program 4 (id=1044): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x5, [0x8, 0x3, 0x4, 0x5, 0xd747]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r4, 0x2, 0x13, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m36.797627709s ago: executing program 2 (id=1045): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)}}], 0x3, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m36.517486844s ago: executing program 4 (id=1046): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffff9, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m35.530670352s ago: executing program 4 (id=1048): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x38c080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x10a, 0x0, 0x5}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x4, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x5, 0x6, 0x9}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0xc0, 0x2, 0x4}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.543224363s ago: executing program 4 (id=1051): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) 1m32.94161044s ago: executing program 2 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x54) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x40000205, 0x8c01) fcntl$dupfd(r5, 0x406, r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x5000, 0x0) io_setup(0x443, &(0x7f0000001100)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) eventfd(0xabc) 1m19.592575174s ago: executing program 2 (id=1060): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a483137140000", 0x17}], 0x1}, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[], 0xfe37, 0x0) 1m19.175776586s ago: executing program 46 (id=1051): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) 1m3.826762909s ago: executing program 47 (id=1060): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a483137140000", 0x17}], 0x1}, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[], 0xfe37, 0x0) 11.197353826s ago: executing program 7 (id=1109): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpgid(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000200)) msgctl$MSG_INFO(0x0, 0xc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) io_getevents(0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001240)=[{}], &(0x7f00000012c0)={r4, r5+10000000}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x801, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000001900)={0x0, [{0x1, 0x220, 0x9, &(0x7f0000000000)="b618bb3ccb26515ebc9b8f53da2578328a1d08b7e67c7e9c5b5933fe1e9d4859f6401bd5c5768fc709b208dfdd36eaaae820f8b72fb0d0d3b8a4aa86e31ebd5fd1097ef5"}, {0x2, 0x77d8, 0x3, &(0x7f0000000200)="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"}, {0x2, 0x6aa0, 0x4, &(0x7f0000002080)="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"}, {0x0, 0x0, 0x7f, 0x0}, {0x0, 0x0, 0xd94, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xd03, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x238, 0x400006, &(0x7f00000013c0)="8371de046e9c48f807673a030c051b24584cbeca2092076cd46901700c8690285c4366625c0853085120246285394761300dc7d9dcbac1993431449ed118ba700e20c73ef9052f"}, {0x1, 0x0, 0x3, &(0x7f00000014c0)}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x47d, &(0x7f0000001600)}, {0x2, 0x318, 0x4, &(0x7f00000016c0)="c9c33e742c953235637044fa462c73fb0ddb03fc07a6fc4804410846a6cf146cf14e7f70dc026656545153001d969a79569ad310ddabc9391c9a016c6c0cb795d9a0f1284bc7e18f1b3a2072644c46b0bb28850e0f002ee9d465cc11a91a6e36fff427"}, {0x0, 0x0, 0xdd, &(0x7f0000001780)}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0xe7c, 0x0}]}) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x1c}}, 0x0) 10.400766205s ago: executing program 6 (id=1110): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000000)="d19e", 0x2}], 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000002c0)=@x86={0xfc, 0xd, 0x1, 0x0, 0x3, 0x0, 0x6, 0x0, 0x7, 0xa, 0x9, 0x3, 0x0, 0x3, 0x1, 0x1, 0x8, 0x81, 0x12, '\x00', 0xf0, 0xd83f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.143504201s ago: executing program 7 (id=1111): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r2) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.815840576s ago: executing program 6 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) tkill(r2, 0xb) 7.185780018s ago: executing program 6 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x10) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 4.425183651s ago: executing program 6 (id=1114): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[], 0x1408}, 0x0) 3.994890597s ago: executing program 6 (id=1115): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x24, 0x5a, 0xc6b747b6bf1c6b95, 0xfffffffd, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x24}}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x6, 0xfffffffb, @vifc_lcl_ifindex, @empty}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x104e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0x5885, 0x2, 0x1000000, 0x48}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, 0xfffffffffffffffe, 0x11) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x100002, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r6, 0x40096102, &(0x7f0000000440)={{}, 0x80}) 3.243857888s ago: executing program 7 (id=1116): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0xff1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) dup3(r2, r0, 0x80000) 1.117316018s ago: executing program 7 (id=1117): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 369.406583ms ago: executing program 7 (id=1118): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x9, 0x200, 0x5}, &(0x7f0000000100)=0x10) 172.498225ms ago: executing program 6 (id=1119): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20004000) 0s ago: executing program 7 (id=1120): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x0) kernel console output (not intermixed with test programs): T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.021802][ T9959] loop1: detected capacity change from 0 to 1024 [ 1043.201743][ T9959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.585320][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.859587][ T9694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.293121][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.474043][ T9971] loop0: detected capacity change from 0 to 1024 [ 1044.554782][ T9971] EXT4-fs: Ignoring removed orlov option [ 1044.978604][ T9974] netlink: 'syz.1.605': attribute type 2 has an invalid length. [ 1045.575684][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.741007][ T9971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.837926][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.845456][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.050688][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.058336][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.663434][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.578283][ T9991] netlink: 'syz.0.606': attribute type 2 has an invalid length. [ 1049.992213][ T9743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.653337][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.650678][ T9804] veth0_vlan: entered promiscuous mode [ 1051.674670][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1051.696034][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1051.708905][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1051.765025][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1051.793834][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1051.876819][ T9804] veth1_vlan: entered promiscuous mode [ 1052.490643][T10015] loop0: detected capacity change from 0 to 1024 [ 1052.606003][T10015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.835271][ T9804] veth0_macvtap: entered promiscuous mode [ 1052.911798][T10021] loop1: detected capacity change from 0 to 1024 [ 1052.949972][T10021] EXT4-fs: Ignoring removed orlov option [ 1052.976844][ T9804] veth1_macvtap: entered promiscuous mode [ 1053.033060][T10021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.293968][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.354573][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.841388][T10032] netlink: 'syz.0.616': attribute type 1 has an invalid length. [ 1053.849850][ T5781] Bluetooth: hci0: command tx timeout [ 1053.939140][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 1054.090932][T10032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1054.430909][T10004] chnl_net:caif_netlink_parms(): no params data found [ 1054.676660][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.689516][T10039] loop0: detected capacity change from 0 to 512 [ 1054.802282][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.072415][T10040] netlink: 'syz.1.617': attribute type 2 has an invalid length. [ 1055.222290][T10039] EXT4-fs: journaled quota format not specified [ 1055.821596][T10039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.618'. [ 1055.922203][ T5781] Bluetooth: hci0: command tx timeout [ 1056.844877][ T195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.913695][ T195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.161975][ T195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.239522][ T195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.315010][ T9743] veth0_vlan: entered promiscuous mode [ 1057.357864][ T6167] bridge_slave_1: left allmulticast mode [ 1057.445994][ T6167] bridge_slave_1: left promiscuous mode [ 1057.509240][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.683763][ T6167] bridge_slave_0: left allmulticast mode [ 1057.719337][ T6167] bridge_slave_0: left promiscuous mode [ 1057.725834][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.808076][T10051] loop0: detected capacity change from 0 to 512 [ 1057.928069][T10051] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.620: inode has both inline data and extents flags [ 1058.000236][ T5781] Bluetooth: hci0: command tx timeout [ 1058.030751][T10051] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1058.031689][T10051] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.620: couldn't read orphan inode 15 (err -117) [ 1058.041248][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1058.041339][ C1] EXT4-fs (loop0): initial error at time 1771396575: ext4_orphan_get:1391: inode 15 [ 1058.041500][ C1] EXT4-fs (loop0): last error at time 1771396575: ext4_orphan_get:1391: inode 15 [ 1058.236389][T10051] loop0: lost filesystem error report for type 5 error -117 [ 1058.252822][T10051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.513924][T10051] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1058.520658][T10051] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1058.590620][T10051] vhci_hcd vhci_hcd.0: Device attached [ 1058.599782][T10054] vhci_hcd: connection closed [ 1058.601324][ T5960] vhci_hcd vhci_hcd.0: stop threads [ 1058.652468][ T5960] vhci_hcd vhci_hcd.0: release socket [ 1058.673051][ T5960] vhci_hcd vhci_hcd.0: disconnect device [ 1058.773355][ T6167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.823747][ T6167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.844659][ T6167] bond0 (unregistering): Released all slaves [ 1059.145266][ T9743] veth1_vlan: entered promiscuous mode [ 1059.539445][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.561196][ T6167] hsr_slave_0: left promiscuous mode [ 1059.617295][ T6167] hsr_slave_1: left promiscuous mode [ 1059.625099][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.669385][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.081225][ T5781] Bluetooth: hci0: command tx timeout [ 1060.476182][T10060] loop0: detected capacity change from 0 to 1024 [ 1060.624866][T10060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.169508][ T6167] team0 (unregistering): Port device team_slave_1 removed [ 1061.266045][ T6167] team0 (unregistering): Port device team_slave_0 removed [ 1061.296530][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.065684][T10071] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 1062.096396][T10004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.115624][T10004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.151879][T10004] bridge_slave_0: entered allmulticast mode [ 1062.189644][T10072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.625'. [ 1062.224425][T10004] bridge_slave_0: entered promiscuous mode [ 1062.342004][T10075] loop1: detected capacity change from 0 to 512 [ 1062.383833][T10075] EXT4-fs: journaled quota format not specified [ 1062.412885][T10071] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1062.445656][T10004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.462837][T10004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.488249][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.626'. [ 1062.508703][T10004] bridge_slave_1: entered allmulticast mode [ 1062.547819][T10004] bridge_slave_1: entered promiscuous mode [ 1062.897317][T10004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.945357][T10079] loop0: detected capacity change from 0 to 512 [ 1062.965832][T10081] loop1: detected capacity change from 0 to 1024 [ 1063.014724][T10004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.071994][T10079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.119925][T10079] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.180479][T10081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.334960][ T9743] veth0_macvtap: entered promiscuous mode [ 1063.414354][T10004] team0: Port device team_slave_0 added [ 1063.464051][T10004] team0: Port device team_slave_1 added [ 1063.589754][ T9743] veth1_macvtap: entered promiscuous mode [ 1063.808238][T10004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.830764][T10004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.908175][T10004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.919847][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.991517][T10004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.046100][T10004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.108424][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.115041][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.149573][T10004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.242828][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.478920][T10095] loop1: detected capacity change from 0 to 1024 [ 1064.680215][T10095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.721719][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1064.773797][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1064.789021][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1064.803114][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1064.814402][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1064.862434][T10004] hsr_slave_0: entered promiscuous mode [ 1065.355292][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.547903][T10004] hsr_slave_1: entered promiscuous mode [ 1065.702698][T10105] netlink: 'syz.0.630': attribute type 2 has an invalid length. [ 1066.784590][T10119] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 1066.887881][ T5781] Bluetooth: hci3: command tx timeout [ 1066.918536][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 1067.004452][T10119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1068.174890][T10143] loop1: detected capacity change from 0 to 1024 [ 1068.309031][T10143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.820306][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.957175][ T5781] Bluetooth: hci3: command tx timeout [ 1069.075272][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.104612][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.574167][T10100] chnl_net:caif_netlink_parms(): no params data found [ 1070.392370][T10170] netlink: 'syz.1.640': attribute type 2 has an invalid length. [ 1070.421909][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.453732][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.707957][ T7471] bridge_slave_1: left allmulticast mode [ 1070.713788][ T7471] bridge_slave_1: left promiscuous mode [ 1070.748965][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.855486][ T7471] bridge_slave_0: left allmulticast mode [ 1070.884149][ T7471] bridge_slave_0: left promiscuous mode [ 1070.925412][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.068918][ T5781] Bluetooth: hci3: command tx timeout [ 1072.249724][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1072.259093][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1072.273115][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1072.285215][ T7471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.298370][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1072.314945][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1072.407130][ T7471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.491701][ T7471] bond0 (unregistering): Released all slaves [ 1072.761046][T10187] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 1072.867300][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.643'. [ 1073.076149][T10187] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1073.119081][ T5780] Bluetooth: hci3: command tx timeout [ 1073.223231][ T7471] hsr_slave_0: left promiscuous mode [ 1073.240911][ T7471] hsr_slave_1: left promiscuous mode [ 1073.256281][ T7471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.283372][ T7471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.331964][ T7471] veth1_macvtap: left promiscuous mode [ 1073.349127][ T7471] veth0_macvtap: left promiscuous mode [ 1073.354968][ T7471] veth1_vlan: left promiscuous mode [ 1073.371444][ T7471] veth0_vlan: left promiscuous mode [ 1073.901146][T10200] loop1: detected capacity change from 0 to 1024 [ 1074.093549][T10200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.398320][ T5780] Bluetooth: hci1: command tx timeout [ 1074.482468][ T7471] team0 (unregistering): Port device team_slave_1 removed [ 1074.487804][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.507880][ T7471] team0 (unregistering): Port device team_slave_0 removed [ 1075.048149][T10188] bond5: entered promiscuous mode [ 1075.061871][T10188] bond5: entered allmulticast mode [ 1075.477686][T10004] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1075.549138][T10004] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1076.382010][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.390580][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.398566][T10229] netlink: 'syz.0.648': attribute type 2 has an invalid length. [ 1076.411985][T10100] bridge_slave_0: entered allmulticast mode [ 1076.422066][T10100] bridge_slave_0: entered promiscuous mode [ 1076.464749][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.484758][ T5780] Bluetooth: hci1: command tx timeout [ 1076.487718][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.511234][T10100] bridge_slave_1: entered allmulticast mode [ 1076.561762][T10100] bridge_slave_1: entered promiscuous mode [ 1076.643091][T10004] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1076.897109][T10004] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1077.530086][T10246] loop1: detected capacity change from 0 to 512 [ 1077.545353][T10246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1077.576669][T10246] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.652: iget: bad extended attribute block 262144 [ 1077.644206][T10246] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1077.645450][T10246] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.652: couldn't read orphan inode 15 (err -117) [ 1077.655012][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1077.655095][ C1] EXT4-fs (loop1): initial error at time 1771396594: ext4_orphan_get:1391: inode 15 [ 1077.655236][ C1] EXT4-fs (loop1): last error at time 1771396594: ext4_orphan_get:1391: inode 15 [ 1077.695752][T10246] loop1: lost filesystem error report for type 5 error -117 [ 1077.699980][T10246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.762589][T10100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.779892][T10246] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.652: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1077.862981][T10100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.098640][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.278019][ T7471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.495646][T10259] loop1: detected capacity change from 0 to 1024 [ 1078.508745][T10258] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 1078.558923][ T5780] Bluetooth: hci1: command tx timeout [ 1078.598966][T10259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.599327][ T7471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.629332][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.655'. [ 1078.803973][T10258] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1078.842741][T10100] team0: Port device team_slave_0 added [ 1078.899664][T10263] bond6: entered promiscuous mode [ 1078.906859][T10263] bond6: entered allmulticast mode [ 1078.934953][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.004228][ T7471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.212483][T10100] team0: Port device team_slave_1 added [ 1079.325182][ T7471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.451833][T10275] loop0: detected capacity change from 0 to 1024 [ 1079.574202][T10275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.738182][T10275] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.657: inode #3204449282: comm syz.0.657: iget: illegal inode # [ 1079.751735][T10100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.777159][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.790307][T10275] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.657: error while reading EA inode 3204449282 err=-117 [ 1079.877274][T10100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.914583][T10100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.947395][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.029163][T10100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.051594][T10181] chnl_net:caif_netlink_parms(): no params data found [ 1080.172111][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.637690][ T5780] Bluetooth: hci1: command tx timeout [ 1080.800281][T10100] hsr_slave_0: entered promiscuous mode [ 1080.824442][T10100] hsr_slave_1: entered promiscuous mode [ 1080.844068][T10100] debugfs: 'hsr0' already exists in 'hsr' [ 1080.883764][T10100] Cannot create hsr debugfs directory [ 1081.418616][ T7471] bridge_slave_1: left allmulticast mode [ 1081.439586][ T7471] bridge_slave_1: left promiscuous mode [ 1081.446075][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.556639][ T7471] bridge_slave_0: left allmulticast mode [ 1081.580139][ T7471] bridge_slave_0: left promiscuous mode [ 1081.586635][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.614653][T10302] loop0: detected capacity change from 0 to 1024 [ 1081.618376][T10303] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 1081.690612][T10302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.229030][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.413947][ T7471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.445495][ T7471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.506394][ T7471] bond0 (unregistering): Released all slaves [ 1084.537295][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.567986][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.585928][T10181] bridge_slave_0: entered allmulticast mode [ 1084.595955][T10181] bridge_slave_0: entered promiscuous mode [ 1084.947789][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.955493][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.991451][T10181] bridge_slave_1: entered allmulticast mode [ 1085.028746][T10181] bridge_slave_1: entered promiscuous mode [ 1085.118130][T10004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.639100][ T7471] hsr_slave_0: left promiscuous mode [ 1085.665377][ T7471] hsr_slave_1: left promiscuous mode [ 1085.674600][ T7471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.702479][ T7471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.720413][ T7471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.773209][ T7471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.822963][ T7471] veth1_macvtap: left promiscuous mode [ 1085.836571][ T7471] veth0_macvtap: left promiscuous mode [ 1085.861207][ T7471] veth1_vlan: left promiscuous mode [ 1085.866712][ T7471] veth0_vlan: left promiscuous mode [ 1087.115720][T10354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.673'. [ 1087.963995][ T7471] team0 (unregistering): Port device team_slave_1 removed [ 1087.994374][ T7471] team0 (unregistering): Port device team_slave_0 removed [ 1088.365755][T10181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.659714][T10341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.669192][T10341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.010328][T10341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.042238][T10341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.384174][T10355] netlink: 'syz.1.673': attribute type 12 has an invalid length. [ 1089.426177][T10181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.731424][ T354] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.767289][ T354] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.810856][T10372] loop1: detected capacity change from 0 to 1024 [ 1089.866507][T10181] team0: Port device team_slave_0 added [ 1089.909397][T10372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.983052][T10181] team0: Port device team_slave_1 added [ 1090.137317][ T354] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.235955][T10381] loop0: detected capacity change from 0 to 256 [ 1090.399960][T10381] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1090.423469][ T354] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.462594][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.541676][T10004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.765645][T10181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.778179][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.833502][T10181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.918642][T10181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.925743][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.987837][T10181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.020322][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.027810][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.194364][T10387] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 1091.228956][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.236380][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.265180][T10390] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 1091.383232][T10387] team0: Port device dummy0 added [ 1091.445164][T10390] team0: Port device dummy0 removed [ 1091.472709][T10390] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1091.596804][T10181] hsr_slave_0: entered promiscuous mode [ 1091.625389][T10181] hsr_slave_1: entered promiscuous mode [ 1091.639807][T10181] debugfs: 'hsr0' already exists in 'hsr' [ 1091.645974][T10181] Cannot create hsr debugfs directory [ 1091.835559][T10395] loop1: detected capacity change from 0 to 128 [ 1091.907521][T10395] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1091.963287][T10395] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.106840][ T29] audit: type=1804 audit(1771396609.348:3): pid=10395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.680" name="/newroot/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=12 res=1 errno=0 [ 1092.276315][T10100] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1092.386357][T10100] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1092.512009][T10100] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1092.525935][ T8844] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1092.576048][T10100] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1092.793503][T10402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.681'. [ 1093.267514][T10406] netlink: 'syz.0.681': attribute type 12 has an invalid length. [ 1093.795423][T10417] loop1: detected capacity change from 0 to 1024 [ 1093.934366][T10417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1094.604482][T10438] loop0: detected capacity change from 0 to 256 [ 1094.706857][ T8844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.793138][T10438] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1095.539958][T10004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.775488][T10100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.796794][T10449] loop0: detected capacity change from 0 to 1024 [ 1095.940469][T10449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.958341][T10181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1095.990732][T10181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1096.085694][T10181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1096.239324][T10181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1096.366691][T10100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.473349][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.569088][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.576511][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.670373][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.677910][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.046128][T10465] loop0: detected capacity change from 0 to 128 [ 1097.110350][T10465] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1097.155036][T10465] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.376357][ T29] audit: type=1804 audit(1771396614.618:4): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.689" name="/newroot/105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=12 res=1 errno=0 [ 1097.673279][ T8768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1098.171140][T10474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'. [ 1098.253755][T10181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.338451][T10476] netlink: 'syz.0.691': attribute type 12 has an invalid length. [ 1098.635100][T10004] veth0_vlan: entered promiscuous mode [ 1098.749268][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.895648][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.903190][ T6166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.068216][T10004] veth1_vlan: entered promiscuous mode [ 1099.188479][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.196023][ T7475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.834058][T10004] veth0_macvtap: entered promiscuous mode [ 1099.892455][T10100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.916858][T10502] loop1: detected capacity change from 0 to 128 [ 1099.998489][T10004] veth1_macvtap: entered promiscuous mode [ 1100.038422][T10502] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1100.215645][T10502] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.375910][ T29] audit: type=1804 audit(1771396617.618:5): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.698" name="/newroot/112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=12 res=1 errno=0 [ 1100.610676][T10004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.746433][T10004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.918475][ T6035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.947413][ T6035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.956398][ T6035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.030970][ T6035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.194234][ T8844] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1101.861643][T10532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.700'. [ 1101.961057][T10532] netlink: 'syz.1.700': attribute type 12 has an invalid length. [ 1102.410955][T10181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.682208][T10100] veth0_vlan: entered promiscuous mode [ 1102.892154][T10100] veth1_vlan: entered promiscuous mode [ 1103.270888][T10181] veth0_vlan: entered promiscuous mode [ 1103.470743][T10100] veth0_macvtap: entered promiscuous mode [ 1103.493433][T10181] veth1_vlan: entered promiscuous mode [ 1103.555289][T10100] veth1_macvtap: entered promiscuous mode [ 1103.783146][T10100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.805944][T10100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.098793][ T195] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.289821][ T354] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.425662][T10181] veth0_macvtap: entered promiscuous mode [ 1104.437750][T10565] overlayfs: failed to clone upperpath [ 1105.327484][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1105.521354][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1105.544380][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.554378][ T10] usb 1-1: Product: syz [ 1105.564529][ T10] usb 1-1: Manufacturer: syz [ 1105.573022][ T10] usb 1-1: SerialNumber: syz [ 1105.618471][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1105.749333][ T5832] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1105.774173][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.823274][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.375726][T10483] usb 1-1: USB disconnect, device number 8 [ 1106.502640][T10181] veth1_macvtap: entered promiscuous mode [ 1106.733635][T10181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.824955][T10181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.971523][ T5832] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1107.007785][ T5832] ath9k_htc: Failed to initialize the device [ 1107.072072][T10483] usb 1-1: ath9k_htc: USB layer deinitialized [ 1107.078578][ T195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.104395][ T195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.163165][ T6033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.212249][ T7471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.574686][T10582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.709'. [ 1107.642614][T10582] netlink: 'syz.0.709': attribute type 12 has an invalid length. [ 1109.097633][ T5832] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1109.322226][ T5832] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1109.337395][ T5832] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.391157][ T5832] usb 2-1: config 220 has no interface number 2 [ 1109.427136][ T5832] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1109.442193][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1109.451239][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1109.461780][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1109.470970][ T5832] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1109.481605][ T5832] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1109.491467][ T5832] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1109.499510][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1109.522233][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1109.552210][ T5832] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1109.563361][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.572732][ T5832] usb 2-1: Product: syz [ 1109.588038][ T5832] usb 2-1: Manufacturer: syz [ 1109.592804][ T5832] usb 2-1: SerialNumber: syz [ 1109.949338][ T5832] usb 2-1: selecting invalid altsetting 0 [ 1109.987760][ T5832] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1109.996287][ T5832] uvcvideo 2-1:220.0: No valid video chain found. [ 1110.157552][ T5832] usb 2-1: selecting invalid altsetting 0 [ 1110.218182][ T5832] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1110.287862][ T5832] usb 2-1: USB disconnect, device number 8 [ 1111.597224][ T5781] Bluetooth: hci2: command tx timeout [ 1111.661672][T10637] overlayfs: failed to clone upperpath [ 1113.489765][T10611] chnl_net:caif_netlink_parms(): no params data found [ 1113.568136][ T5832] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1113.677492][ T5781] Bluetooth: hci2: command tx timeout [ 1113.751652][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.812876][ T5832] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1113.847431][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.855653][ T5832] usb 1-1: Product: syz [ 1113.877349][ T5832] usb 1-1: Manufacturer: syz [ 1113.882135][ T5832] usb 1-1: SerialNumber: syz [ 1113.931153][ T5832] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1114.006824][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.022364][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1114.416393][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.553599][T10483] usb 1-1: USB disconnect, device number 9 [ 1114.673991][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.022710][T10659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.717'. [ 1115.238717][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1115.246242][ T10] ath9k_htc: Failed to initialize the device [ 1115.318780][T10483] usb 1-1: ath9k_htc: USB layer deinitialized [ 1115.346820][ T6035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.408904][ T6035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.515718][T10659] netlink: 'syz.1.717': attribute type 12 has an invalid length. [ 1115.757379][ T5781] Bluetooth: hci2: command tx timeout [ 1116.139516][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.180294][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.313763][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.358189][T10611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.391560][T10611] bridge_slave_0: entered allmulticast mode [ 1116.424371][T10611] bridge_slave_0: entered promiscuous mode [ 1116.528088][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.569733][T10611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.598163][T10611] bridge_slave_1: entered allmulticast mode [ 1116.677901][T10611] bridge_slave_1: entered promiscuous mode [ 1116.988811][ T12] bridge_slave_1: left allmulticast mode [ 1116.994641][ T12] bridge_slave_1: left promiscuous mode [ 1117.013075][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.060246][ T12] bridge_slave_0: left allmulticast mode [ 1117.086804][ T12] bridge_slave_0: left promiscuous mode [ 1117.126569][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.162994][T10688] loop1: detected capacity change from 0 to 256 [ 1117.867727][ T5781] Bluetooth: hci2: command tx timeout [ 1119.032141][ T7044] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1119.231386][ T7044] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1119.256089][ T7044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.305333][ T7044] usb 2-1: Product: syz [ 1119.323618][ T7044] usb 2-1: Manufacturer: syz [ 1119.341034][ T7044] usb 2-1: SerialNumber: syz [ 1119.446715][ T7044] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1119.617384][ T8168] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1120.258900][ T8867] usb 2-1: USB disconnect, device number 9 [ 1120.406905][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.7.726'. [ 1120.781874][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.805955][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.828921][ T12] bond0 (unregistering): Released all slaves [ 1120.971559][T10702] netlink: 'syz.7.726': attribute type 12 has an invalid length. [ 1121.076822][T10611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.078994][ T8168] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1121.126211][ T8168] ath9k_htc: Failed to initialize the device [ 1121.159957][ T8867] usb 2-1: ath9k_htc: USB layer deinitialized [ 1121.295257][ T12] hsr_slave_0: left promiscuous mode [ 1121.417348][ T12] hsr_slave_1: left promiscuous mode [ 1121.441293][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.491891][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.559541][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.612234][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.820427][ T12] veth1_macvtap: left promiscuous mode [ 1121.826134][ T12] veth0_macvtap: left promiscuous mode [ 1121.845580][ T12] veth1_vlan: left promiscuous mode [ 1121.858404][ T12] veth0_vlan: left promiscuous mode [ 1125.549864][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.556440][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.792436][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1125.874604][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1126.663910][T10611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.815327][T10749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.737'. [ 1126.943059][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.964422][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.277637][T10611] team0: Port device team_slave_0 added [ 1127.294258][T10611] team0: Port device team_slave_1 added [ 1127.478915][T10750] netlink: 'syz.0.737': attribute type 12 has an invalid length. [ 1128.048683][T10611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.055774][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.176734][T10611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.271771][T10611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.305777][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.363221][T10611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.444599][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.517557][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.905588][T10611] hsr_slave_0: entered promiscuous mode [ 1129.071467][T10611] hsr_slave_1: entered promiscuous mode [ 1131.102799][T10798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 1131.548969][T10801] netlink: 'syz.0.749': attribute type 12 has an invalid length. [ 1133.196105][T10611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1133.292899][T10611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1133.346852][T10611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1133.461657][T10611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1134.204742][T10833] overlayfs: failed to clone upperpath [ 1139.372657][T10611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.592151][T10611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.680711][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.688308][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.872503][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.880070][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.607805][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 1141.696347][T10883] bridge_slave_0 (unregistering): left allmulticast mode [ 1141.751222][T10883] bridge_slave_0 (unregistering): left promiscuous mode [ 1141.802388][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.520495][ T29] audit: type=1326 audit(1771396663.738:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10916 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b3d9c629 code=0x7ffc0000 [ 1146.564743][T10611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.676336][ T29] audit: type=1326 audit(1771396663.738:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10916 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b3d9c629 code=0x7ffc0000 [ 1146.834922][ T29] audit: type=1326 audit(1771396663.798:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10916 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe4b3d9c629 code=0x7ffc0000 [ 1146.962268][ T29] audit: type=1326 audit(1771396663.808:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10916 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b3d9c629 code=0x7ffc0000 [ 1149.372521][T10966] tipc: Started in network mode [ 1149.397946][T10966] tipc: Node identity 3e8027fa1672, cluster identity 4711 [ 1149.406231][T10966] tipc: Enabled bearer , priority 0 [ 1149.463926][T10968] syzkaller0: entered promiscuous mode [ 1149.488452][T10968] syzkaller0: entered allmulticast mode [ 1149.686645][T10966] tipc: Resetting bearer [ 1149.947979][T10965] tipc: Resetting bearer [ 1150.001807][T10965] tipc: Disabling bearer [ 1150.298061][T10611] veth0_vlan: entered promiscuous mode [ 1150.501946][T10611] veth1_vlan: entered promiscuous mode [ 1153.141629][T10987] loop7: detected capacity change from 0 to 512 [ 1153.224898][T10990] loop0: detected capacity change from 0 to 128 [ 1153.379688][T10987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.432649][T10611] veth0_macvtap: entered promiscuous mode [ 1153.461131][T10987] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.484421][T10990] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1153.618173][T10990] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.641035][T10611] veth1_macvtap: entered promiscuous mode [ 1153.788669][ T29] audit: type=1804 audit(1771396671.038:10): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.799" name="/newroot/147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=12 res=1 errno=0 [ 1154.016467][T10611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.191973][T10611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.275513][T10100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.390471][ T5960] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.438794][ T5960] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.563509][ T5960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.609369][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.081271][ T8768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1156.576472][T11041] loop7: detected capacity change from 0 to 512 [ 1156.802907][T11041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.847353][T11041] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.692730][T10100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.481189][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.509348][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.969158][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.053362][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.889974][T11188] loop7: detected capacity change from 0 to 128 [ 1170.222134][T11188] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1170.338655][T11188] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.541660][ T29] audit: type=1804 audit(1771396687.788:11): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.848" name="/newroot/36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop7" ino=12 res=1 errno=0 [ 1172.100440][T10100] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1176.411259][T11243] loop4: detected capacity change from 0 to 128 [ 1176.567706][T11243] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1176.707789][T11243] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.768322][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1176.798273][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1176.815460][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1176.833484][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1176.858185][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1176.942212][ T29] audit: type=1804 audit(1771396694.178:12): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.864" name="/newroot/7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=12 res=1 errno=0 [ 1177.721108][T10611] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1178.967824][ T5780] Bluetooth: hci0: command tx timeout [ 1181.488851][ T5780] Bluetooth: hci0: command tx timeout [ 1183.716124][ T5780] Bluetooth: hci0: command tx timeout [ 1184.039572][T11246] chnl_net:caif_netlink_parms(): no params data found [ 1184.768346][T11284] loop4: detected capacity change from 0 to 512 [ 1184.969738][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1185.091013][T11293] netlink: 'syz.7.875': attribute type 2 has an invalid length. [ 1185.128534][T11284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.867724][ T5780] Bluetooth: hci0: command tx timeout [ 1185.898898][T11284] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.971900][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.922362][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1190.000274][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 1190.362153][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1190.416530][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.527248][ T10] usb 1-1: Product: syz [ 1190.580619][ T10] usb 1-1: Manufacturer: syz [ 1190.667859][ T10] usb 1-1: can't set config #1, error -71 [ 1190.750550][ T10] usb 1-1: USB disconnect, device number 10 [ 1190.882494][T10611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.429332][T11298] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1191.472004][T11298] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1191.599110][T11298] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1191.691504][T11298] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1191.796483][T11246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.837949][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.858963][T11246] bridge_slave_0: entered allmulticast mode [ 1191.895475][T11246] bridge_slave_0: entered promiscuous mode [ 1192.218320][T11246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.232252][T11298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1192.259091][T11298] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1192.288159][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.369237][T11246] bridge_slave_1: entered allmulticast mode [ 1192.412983][T11298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1192.445587][T11246] bridge_slave_1: entered promiscuous mode [ 1192.457111][T11298] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1192.537731][T11298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1192.543803][T11298] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1193.158437][T11246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.489619][T11246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.194639][T11298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1194.237191][T11298] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1194.783188][T11246] team0: Port device team_slave_0 added [ 1196.953727][T11340] netlink: 'syz.7.885': attribute type 2 has an invalid length. [ 1198.364122][ T8867] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1198.556705][T11350] loop0: detected capacity change from 0 to 512 [ 1198.617364][ T8867] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1198.656563][T11246] team0: Port device team_slave_1 added [ 1198.707599][ T8867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.747465][ T8867] usb 5-1: Product: syz [ 1198.751827][ T8867] usb 5-1: Manufacturer: syz [ 1198.756567][ T8867] usb 5-1: SerialNumber: syz [ 1198.854645][ T8867] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1199.009177][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1199.602682][T11246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.695100][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.754157][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1201.645434][ T10] ath9k_htc: Failed to initialize the device [ 1204.067296][ T8168] usb 5-1: USB disconnect, device number 5 [ 1204.148640][T11350] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 1204.153200][ T8168] usb 5-1: ath9k_htc: USB layer deinitialized [ 1204.194807][T11246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.309835][T11246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.387874][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.593653][T11246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.430989][T11246] hsr_slave_0: entered promiscuous mode [ 1205.446106][T11365] loop0: detected capacity change from 0 to 1024 [ 1205.462798][T11246] hsr_slave_1: entered promiscuous mode [ 1205.490949][T11246] debugfs: 'hsr0' already exists in 'hsr' [ 1205.551451][T11246] Cannot create hsr debugfs directory [ 1205.634152][T11365] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 1205.684728][T11365] System zones: 0-1, 3-8 [ 1205.786203][T11365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1205.837818][T11365] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.041936][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1206.084547][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1206.108229][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1206.138461][ T5780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1206.151011][ T5780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1206.365546][ T5781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1206.398603][ T5781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1206.448125][ T5781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1206.493078][ T5781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1206.538822][ T5781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1206.647957][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1208.495662][ T8867] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1208.565411][T11381] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1208.597244][T11381] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1208.638211][ T5780] Bluetooth: hci6: command tx timeout [ 1208.722447][ T8867] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1208.773346][ T8867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.830068][ T8867] usb 5-1: Product: syz [ 1208.834420][ T8867] usb 5-1: Manufacturer: syz [ 1208.877200][ T8867] usb 5-1: SerialNumber: syz [ 1208.924888][ T8867] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1209.039333][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1209.681983][ T7044] usb 5-1: USB disconnect, device number 6 [ 1210.245922][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1210.301868][ T10] ath9k_htc: Failed to initialize the device [ 1210.453348][ T7044] usb 5-1: ath9k_htc: USB layer deinitialized [ 1211.461415][ T5960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.682096][ T5960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.887895][T11371] chnl_net:caif_netlink_parms(): no params data found [ 1211.957989][T11423] loop4: detected capacity change from 0 to 1024 [ 1211.979523][ T5960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.067462][T11423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 1212.076097][T11423] System zones: 0-1, 3-8 [ 1212.192148][T11423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.307988][T11423] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.355991][ T5960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.761959][T10611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1212.805774][T11246] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1212.959660][T11436] loop0: detected capacity change from 0 to 128 [ 1213.057486][T11246] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1213.088563][T11436] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1213.150982][T11246] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1213.223939][T11436] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.327268][T11246] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1213.499792][ T29] audit: type=1804 audit(1771396730.748:13): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.905" name="/newroot/175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=12 res=1 errno=0 [ 1213.697762][ T5960] bridge_slave_1: left allmulticast mode [ 1213.703604][ T5960] bridge_slave_1: left promiscuous mode [ 1213.788135][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.888686][ T5960] bridge_slave_0: left allmulticast mode [ 1213.895085][ T5960] bridge_slave_0: left promiscuous mode [ 1213.957901][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.232149][ T8768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1214.978601][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.039649][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.085292][ T5960] bond0 (unregistering): Released all slaves [ 1215.378814][T11371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.394206][T11371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.406856][T11371] bridge_slave_0: entered allmulticast mode [ 1215.424389][T11371] bridge_slave_0: entered promiscuous mode [ 1215.500897][T11371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.515007][T11371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.533482][T11371] bridge_slave_1: entered allmulticast mode [ 1215.537148][ T7044] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1215.559760][T11371] bridge_slave_1: entered promiscuous mode [ 1215.763862][ T7044] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1215.803463][ T7044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.837180][ T7044] usb 1-1: Product: syz [ 1215.841532][ T7044] usb 1-1: Manufacturer: syz [ 1215.846277][ T7044] usb 1-1: SerialNumber: syz [ 1215.931090][ T7044] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1216.040232][ T8168] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1216.041941][T11371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.167889][T11371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.477899][ T5832] usb 1-1: USB disconnect, device number 11 [ 1216.680616][ T5960] hsr_slave_0: left promiscuous mode [ 1216.700501][ T5960] hsr_slave_1: left promiscuous mode [ 1216.715190][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.742802][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.764844][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.775208][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.818366][ T5960] veth1_macvtap: left promiscuous mode [ 1216.824052][ T5960] veth0_macvtap: left promiscuous mode [ 1216.856616][ T5960] veth1_vlan: left promiscuous mode [ 1216.875989][ T5960] veth0_vlan: left promiscuous mode [ 1217.287990][ T8168] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1217.295566][ T8168] ath9k_htc: Failed to initialize the device [ 1217.357379][ T5832] usb 1-1: ath9k_htc: USB layer deinitialized [ 1217.557527][T11480] loop0: detected capacity change from 0 to 512 [ 1217.733148][T11480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1217.819511][T11480] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.386411][T11494] loop4: detected capacity change from 0 to 128 [ 1218.466674][T11494] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1218.485387][T11494] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.540329][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.706764][ T29] audit: type=1804 audit(1771396735.948:14): pid=11494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.916" name="/newroot/27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=12 res=1 errno=0 [ 1218.832361][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 1218.966162][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 1219.381862][T10611] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1219.684127][T11371] team0: Port device team_slave_0 added [ 1219.889522][T11371] team0: Port device team_slave_1 added [ 1220.241898][T11371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.272800][T11371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.301734][T11371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.389558][T11371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.427133][T11371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.535864][T11371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.155041][T11371] hsr_slave_0: entered promiscuous mode [ 1221.181156][T11371] hsr_slave_1: entered promiscuous mode [ 1221.220372][T11371] debugfs: 'hsr0' already exists in 'hsr' [ 1221.239726][T11371] Cannot create hsr debugfs directory [ 1221.257324][ T7044] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1221.402959][ T5832] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1221.432807][ T7044] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1221.463401][ T7044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.490072][ T7044] usb 1-1: Product: syz [ 1221.497243][ T7044] usb 1-1: Manufacturer: syz [ 1221.502075][ T7044] usb 1-1: SerialNumber: syz [ 1221.563929][ T5832] usb 8-1: device descriptor read/64, error -71 [ 1221.639354][ T7044] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1221.674781][ T8168] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1221.857440][ T5832] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1222.047256][ T5832] usb 8-1: device descriptor read/64, error -71 [ 1222.172848][ T10] usb 1-1: USB disconnect, device number 12 [ 1222.211085][ T5832] usb usb8-port1: attempt power cycle [ 1222.336506][T11246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.585444][T11246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.598235][ T5832] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1222.649710][ T5832] usb 8-1: device descriptor read/8, error -71 [ 1222.714670][T11545] loop4: detected capacity change from 0 to 512 [ 1222.853689][T11545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.927245][ T5832] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1222.958908][ T8168] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1222.966538][ T8168] ath9k_htc: Failed to initialize the device [ 1222.981565][T11545] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.009461][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 1223.048407][ T5832] usb 8-1: device descriptor read/8, error -71 [ 1223.139216][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.146841][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.179286][T11553] loop0: detected capacity change from 0 to 128 [ 1223.180076][ T5832] usb usb8-port1: unable to enumerate USB device [ 1223.243167][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.250873][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.321613][T11553] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1223.398188][T11553] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.490592][T10611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.668561][ T29] audit: type=1804 audit(1771396740.908:15): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.926" name="/newroot/182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=12 res=1 errno=0 [ 1224.290384][ T8768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1224.349964][T11371] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1224.511709][T11371] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1224.619841][T11371] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1224.765144][T11371] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1226.109633][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.204052][T11371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.289757][T11597] loop7: detected capacity change from 0 to 512 [ 1226.435569][T11371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.458213][T11597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1226.471433][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1226.555750][T11597] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.647012][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.654494][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.706036][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1226.757051][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.773862][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.781404][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.807959][ T10] usb 1-1: Product: syz [ 1226.812296][ T10] usb 1-1: Manufacturer: syz [ 1226.857866][ T10] usb 1-1: SerialNumber: syz [ 1226.947795][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1226.991775][ T8867] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1227.169565][T11606] loop4: detected capacity change from 0 to 1024 [ 1227.182565][T10100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.401881][T11606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.446578][ T8168] usb 1-1: USB disconnect, device number 13 [ 1227.575404][T11371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1227.785371][T11616] loop7: detected capacity change from 0 to 128 [ 1227.870565][T11616] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1227.905330][T11616] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1228.229159][ T29] audit: type=1804 audit(1771396745.478:16): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.937" name="/newroot/54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop7" ino=12 res=1 errno=0 [ 1228.233779][T10611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.297363][ T8867] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1228.304949][ T8867] ath9k_htc: Failed to initialize the device [ 1228.384285][ T8168] usb 1-1: ath9k_htc: USB layer deinitialized [ 1229.227254][ T8867] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1229.246094][T10100] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1229.397352][ T8867] usb 5-1: device descriptor read/64, error -71 [ 1229.409928][T11246] veth0_vlan: entered promiscuous mode [ 1229.564313][T11246] veth1_vlan: entered promiscuous mode [ 1229.629278][T11371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.658724][ T8867] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1229.841219][ T8867] usb 5-1: device descriptor read/64, error -71 [ 1229.972901][ T8867] usb usb5-port1: attempt power cycle [ 1230.155038][T11246] veth0_macvtap: entered promiscuous mode [ 1230.274182][T11371] veth0_vlan: entered promiscuous mode [ 1230.294936][T11246] veth1_macvtap: entered promiscuous mode [ 1230.367652][ T8867] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1230.444750][ T8867] usb 5-1: device descriptor read/8, error -71 [ 1230.486157][T11246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.558730][T11371] veth1_vlan: entered promiscuous mode [ 1230.628364][T11246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.710364][ T8867] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1230.748991][ T1143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.751095][ T8867] usb 5-1: device descriptor read/8, error -71 [ 1230.774736][ T1143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.824220][ T1143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.858290][ T1143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.880023][ T8867] usb usb5-port1: unable to enumerate USB device [ 1231.167911][T11371] veth0_macvtap: entered promiscuous mode [ 1231.256842][T11371] veth1_macvtap: entered promiscuous mode [ 1231.476835][T11660] loop0: detected capacity change from 0 to 512 [ 1231.478821][T11371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.544073][T11660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1231.568224][T11660] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1231.642785][T11371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.691476][ T7471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.746580][ T7471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.783265][T11666] loop7: detected capacity change from 0 to 1024 [ 1231.861666][ T7471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.932731][ T6167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.954468][T11666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.069900][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.794914][T10100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.847134][ T8867] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1233.117414][ T8867] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1233.126677][ T8867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.234322][ T8867] usb 1-1: Product: syz [ 1233.239972][ T8867] usb 1-1: Manufacturer: syz [ 1233.247909][ T8867] usb 1-1: SerialNumber: syz [ 1233.402086][ T8867] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1233.435053][T11694] loop7: detected capacity change from 0 to 128 [ 1233.507109][ T5832] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1233.550102][T11694] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1233.634684][T11694] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1233.856716][ T29] audit: type=1804 audit(1771396751.098:17): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.949" name="/newroot/59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop7" ino=12 res=1 errno=0 [ 1233.947746][ T7044] usb 1-1: USB disconnect, device number 14 [ 1234.303073][T10100] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1234.887421][ T5832] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1234.927917][ T5832] ath9k_htc: Failed to initialize the device [ 1234.980641][ T7044] usb 1-1: ath9k_htc: USB layer deinitialized [ 1236.337371][ T5832] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1236.516269][ T5832] usb 1-1: device descriptor read/64, error -71 [ 1236.791687][ T5832] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1236.967241][ T5832] usb 1-1: device descriptor read/64, error -71 [ 1236.978100][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1236.995262][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1237.011566][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1237.026713][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1237.048453][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1237.078055][ T5832] usb usb1-port1: attempt power cycle [ 1237.206655][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1237.224671][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1237.236315][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1237.259261][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1237.273643][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1237.448199][ T5832] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1237.527991][ T5832] usb 1-1: device descriptor read/8, error -71 [ 1237.814697][ T5832] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1237.883789][ T5832] usb 1-1: device descriptor read/8, error -71 [ 1237.937395][T11764] loop4: detected capacity change from 0 to 128 [ 1238.026187][ T5832] usb usb1-port1: unable to enumerate USB device [ 1238.109718][T11764] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1238.175213][T11764] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1238.317956][T11758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1238.324104][T11758] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1238.407093][ T29] audit: type=1804 audit(1771396755.648:18): pid=11764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.960" name="/newroot/43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=12 res=1 errno=0 [ 1239.302829][T10611] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1239.496590][ T1143] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.582245][ T5832] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1239.607332][T11746] chnl_net:caif_netlink_parms(): no params data found [ 1239.779677][ T1143] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.804874][ T5832] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1239.837107][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.852148][ T5832] usb 8-1: Product: syz [ 1239.856491][ T5832] usb 8-1: Manufacturer: syz [ 1239.907165][ T5832] usb 8-1: SerialNumber: syz [ 1239.989131][ T5832] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1240.109106][ T8867] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1240.184473][ T9976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.256847][ T9976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.345896][ T1143] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.756355][ T5832] usb 8-1: USB disconnect, device number 6 [ 1240.906299][ T1143] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.069518][ T9976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.103943][ T9976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.297337][ T8867] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1241.304896][ T8867] ath9k_htc: Failed to initialize the device [ 1241.379875][ T5832] usb 8-1: ath9k_htc: USB layer deinitialized [ 1241.665469][ T1143] bridge_slave_1: left allmulticast mode [ 1241.687410][ T1143] bridge_slave_1: left promiscuous mode [ 1241.693808][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.861205][ T1143] bridge_slave_0: left allmulticast mode [ 1241.873093][ T1143] bridge_slave_0: left promiscuous mode [ 1241.902756][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.792972][T11819] loop0: detected capacity change from 0 to 1024 [ 1242.946234][T11819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.037125][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1243.221948][ T10] usb 3-1: device descriptor read/64, error -71 [ 1243.480733][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.510234][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1243.540017][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.599566][ T1143] bond0 (unregistering): Released all slaves [ 1243.628244][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.707206][ T10] usb 3-1: device descriptor read/64, error -71 [ 1243.864426][ T10] usb usb3-port1: attempt power cycle [ 1244.210532][ T1143] hsr_slave_0: left promiscuous mode [ 1244.272723][ T1143] hsr_slave_1: left promiscuous mode [ 1244.278613][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1244.338015][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.345560][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.357349][ T10] usb 3-1: device descriptor read/8, error -71 [ 1244.420438][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.433904][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.583675][ T1143] veth1_macvtap: left promiscuous mode [ 1244.603508][ T1143] veth0_macvtap: left promiscuous mode [ 1244.610634][ T1143] veth1_vlan: left promiscuous mode [ 1244.616209][ T1143] veth0_vlan: left promiscuous mode [ 1244.617111][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1244.696815][ T10] usb 3-1: device descriptor read/8, error -71 [ 1244.838327][ T10] usb usb3-port1: unable to enumerate USB device [ 1245.607234][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1245.735445][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 1245.810759][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1245.832762][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.848520][ T10] usb 1-1: Product: syz [ 1245.852854][ T10] usb 1-1: Manufacturer: syz [ 1245.862806][ T10] usb 1-1: SerialNumber: syz [ 1245.874966][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 1245.913017][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1245.971061][ T8867] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1246.485221][ T8168] usb 1-1: USB disconnect, device number 19 [ 1246.527158][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 1246.778201][T11746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.830299][T11746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.855948][T11746] bridge_slave_0: entered allmulticast mode [ 1246.891049][T11746] bridge_slave_0: entered promiscuous mode [ 1246.903835][T11862] loop2: detected capacity change from 0 to 1024 [ 1247.011083][T11746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.029481][T11746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.032099][T11862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.046721][T11746] bridge_slave_1: entered allmulticast mode [ 1247.059072][T11746] bridge_slave_1: entered promiscuous mode [ 1247.118746][ T8867] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1247.126105][ T8867] ath9k_htc: Failed to initialize the device [ 1247.227641][ T8168] usb 1-1: ath9k_htc: USB layer deinitialized [ 1247.621681][T11371] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.663749][T11746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.756331][T11746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.335948][T11746] team0: Port device team_slave_0 added [ 1248.427778][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.434358][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.529271][T11746] team0: Port device team_slave_1 added [ 1251.198770][T11746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.205872][T11746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.838027][T11746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.855417][T11746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.862632][T11746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.961731][T11746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.612438][T11907] loop0: detected capacity change from 0 to 512 [ 1252.909684][T11907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.923444][T11907] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1253.128386][T11746] hsr_slave_0: entered promiscuous mode [ 1253.139565][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.151973][T11746] hsr_slave_1: entered promiscuous mode [ 1253.180885][T11746] debugfs: 'hsr0' already exists in 'hsr' [ 1253.186771][T11746] Cannot create hsr debugfs directory [ 1253.652864][T11915] loop0: detected capacity change from 0 to 1024 [ 1253.928104][T11915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1254.558792][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.829847][T11926] kvm: pic: non byte write [ 1256.635376][T11746] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1256.679824][T11943] loop0: detected capacity change from 0 to 512 [ 1256.717755][T11746] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1256.798608][T11746] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1256.879322][T11746] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1257.009483][T11943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.101338][T11943] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.479942][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.372696][T11746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.619773][T11746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.747509][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.754948][ T9976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.790013][T11963] loop2: detected capacity change from 0 to 1024 [ 1258.875911][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.883440][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1258.919863][T11963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1259.640445][T11371] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.762406][T11972] kvm: pic: non byte write [ 1260.941976][T11988] loop2: detected capacity change from 0 to 512 [ 1261.211416][T11988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1261.291144][T11988] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1261.615536][T11746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.859652][T11371] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.935974][T12028] kvm: pic: non byte write [ 1264.582394][T11746] veth0_vlan: entered promiscuous mode [ 1264.801863][T11746] veth1_vlan: entered promiscuous mode [ 1265.184661][T12043] loop2: detected capacity change from 0 to 512 [ 1265.349251][T11746] veth0_macvtap: entered promiscuous mode [ 1265.428500][T12043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1267.841487][T12043] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.922580][T11746] veth1_macvtap: entered promiscuous mode [ 1271.321145][T11746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.396478][T11746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.526066][ T1143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.527898][T11371] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.575713][ T1143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.625828][ T1143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.677281][ T1143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.977585][T10483] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1275.193381][T10483] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1275.218992][T10483] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1275.266467][T10483] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1275.328165][T10483] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1275.358007][T10483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.397627][T10483] usb 3-1: Product: syz [ 1275.437485][T10483] usb 3-1: Manufacturer: syz [ 1275.442747][T10483] usb 3-1: SerialNumber: syz [ 1275.759215][T10483] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1275.777197][T10483] uvcvideo 3-1:220.0: No valid video chain found. [ 1275.818186][T10483] usb 3-1: USB disconnect, device number 11 [ 1281.426376][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.495226][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.598659][T12133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1281.616154][T12133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1281.627989][T12133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1281.717927][T12133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1281.745220][T12133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1281.841166][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.901641][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.841606][T12133] Bluetooth: hci0: command tx timeout [ 1284.050463][T12131] chnl_net:caif_netlink_parms(): no params data found [ 1285.027564][ T29] audit: type=1800 audit(1771396802.228:19): pid=12171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1051" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1285.918520][T12133] Bluetooth: hci0: command tx timeout [ 1288.010900][T12133] Bluetooth: hci0: command tx timeout [ 1291.522172][T12133] Bluetooth: hci0: command tx timeout [ 1296.953844][T12189] ceph: No mds server is up or the cluster is laggy [ 1296.962248][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1296.973535][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1297.820218][T12131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.899809][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.939707][T12131] bridge_slave_0: entered allmulticast mode [ 1297.981102][T12203] loop6: detected capacity change from 0 to 128 [ 1297.989852][T12131] bridge_slave_0: entered promiscuous mode [ 1298.170815][T12131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.217387][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.225201][T12131] bridge_slave_1: entered allmulticast mode [ 1298.235277][T12131] bridge_slave_1: entered promiscuous mode [ 1298.259915][T12203] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1298.278430][T12203] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1298.429093][ T29] audit: type=1804 audit(1771396815.678:20): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1058" name="/newroot/4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop6" ino=12 res=1 errno=0 [ 1298.841513][T12131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.946359][T12131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.023830][ T6166] bridge_slave_1: left allmulticast mode [ 1299.075438][ T6166] bridge_slave_1: left promiscuous mode [ 1299.092579][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.516742][T11746] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1300.017513][ T6166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.109878][ T6166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.155701][ T6166] bond0 (unregistering): Released all slaves [ 1300.236584][ T6166] bond1 (unregistering): Released all slaves [ 1300.304800][ T6166] bond2 (unregistering): Released all slaves [ 1300.332590][ T8168] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1300.383583][ T6166] bond3 (unregistering): Released all slaves [ 1300.450912][ T6166] bond4 (unregistering): Released all slaves [ 1300.532506][ T8168] usb 7-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1300.550399][ T6166] bond5 (unregistering): Released all slaves [ 1300.582196][ T8168] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1300.612511][ T8168] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1300.636248][ T6166] bond6 (unregistering): Released all slaves [ 1300.674275][ T8168] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1300.722433][ T8168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.747186][ T8168] usb 7-1: Product: syz [ 1300.751701][ T8168] usb 7-1: Manufacturer: syz [ 1300.757371][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1300.768714][ T8168] usb 7-1: SerialNumber: syz [ 1300.778320][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1300.792251][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1300.805428][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1300.827802][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1301.073163][ T8168] uvcvideo 7-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1301.097274][ T8168] uvcvideo 7-1:220.0: No valid video chain found. [ 1301.159898][ T8168] usb 7-1: USB disconnect, device number 15 [ 1301.173903][T12131] team0: Port device team_slave_0 added [ 1301.269480][T12131] team0: Port device team_slave_1 added [ 1301.613032][T12131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.626276][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.653538][T12131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.746748][T12131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.785646][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.874838][T12131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.195442][T12230] fuse: Unknown parameter 'grou00000000000000000000' [ 1302.509729][ T6166] hsr_slave_0: left promiscuous mode [ 1302.557069][ T6166] hsr_slave_1: left promiscuous mode [ 1302.564954][ T6166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.654590][ T6166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.877418][ T5780] Bluetooth: hci4: command tx timeout [ 1304.967245][ T5780] Bluetooth: hci4: command tx timeout [ 1305.880235][ T6166] team0 (unregistering): Port device team_slave_1 removed [ 1306.008133][ T6166] team0 (unregistering): Port device team_slave_0 removed [ 1306.535760][T12131] hsr_slave_0: entered promiscuous mode [ 1306.580992][T12131] hsr_slave_1: entered promiscuous mode [ 1306.619764][T12131] debugfs: 'hsr0' already exists in 'hsr' [ 1306.625641][T12131] Cannot create hsr debugfs directory [ 1307.057694][ T5780] Bluetooth: hci4: command tx timeout [ 1307.434571][ T8168] libceph: connect (1)[c::]:6789 error -101 [ 1307.443033][ T8168] libceph: mon0 (1)[c::]:6789 connect error [ 1307.520964][T12250] ceph: No mds server is up or the cluster is laggy [ 1308.369235][T12262] loop7: detected capacity change from 0 to 512 [ 1313.799513][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1313.806088][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1313.827109][ T5780] Bluetooth: hci4: command tx timeout [ 1313.982785][T12220] chnl_net:caif_netlink_parms(): no params data found [ 1315.608744][ T5960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.968560][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1315.998581][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1316.011204][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1316.032869][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1316.062313][ T5960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.078635][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1316.373316][ T5960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.419126][T12287] fuse: Unknown parameter 'grou00000000000000000000' [ 1316.471495][T12131] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1316.662160][ T5960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.925706][T12131] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1316.983922][T12131] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1317.113608][T12220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.135325][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.149923][T12220] bridge_slave_0: entered allmulticast mode [ 1317.169678][T12220] bridge_slave_0: entered promiscuous mode [ 1317.210891][T12131] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1317.317937][T12220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.339126][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.354954][T12220] bridge_slave_1: entered allmulticast mode [ 1317.380941][T12220] bridge_slave_1: entered promiscuous mode [ 1317.788034][T12220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.959619][T12220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.157786][T12133] Bluetooth: hci2: command tx timeout [ 1318.303827][T12220] team0: Port device team_slave_0 added [ 1318.366343][T12220] team0: Port device team_slave_1 added [ 1318.401268][ T5960] bridge_slave_1: left allmulticast mode [ 1318.407412][ T5960] bridge_slave_1: left promiscuous mode [ 1318.427944][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.475512][ T5960] bridge_slave_0: left allmulticast mode [ 1318.487685][ T5960] bridge_slave_0: left promiscuous mode [ 1318.494138][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.237392][T12133] Bluetooth: hci2: command tx timeout [ 1321.912502][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.936324][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.970342][ T5960] bond0 (unregistering): Released all slaves [ 1322.007642][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1322.193977][ T10] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.216193][ T10] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1322.239356][ T10] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1322.357397][T12133] Bluetooth: hci2: command tx timeout [ 1322.543781][T12220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.587464][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.644852][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1322.667276][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.675464][ T10] usb 7-1: Product: syz [ 1322.697579][T12220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.697857][ T10] usb 7-1: Manufacturer: syz [ 1322.727267][ T10] usb 7-1: SerialNumber: syz [ 1322.794578][T12220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.808903][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.839630][T12220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.033321][ T10] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1323.097192][ T10] uvcvideo 7-1:220.0: No valid video chain found. [ 1323.148278][ T10] usb 7-1: USB disconnect, device number 16 [ 1323.161184][T12275] udevd[12275]: setting mode of /dev/bus/usb/007/016 to 020664 failed: No such file or directory [ 1323.202543][T12275] udevd[12275]: setting owner of /dev/bus/usb/007/016 to uid=0, gid=0 failed: No such file or directory [ 1323.286327][ T5960] hsr_slave_0: left promiscuous mode [ 1323.314608][ T5960] hsr_slave_1: left promiscuous mode [ 1323.337631][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.361066][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.381309][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.399502][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.457500][ T5960] veth1_macvtap: left promiscuous mode [ 1323.463455][ T5960] veth0_macvtap: left promiscuous mode [ 1323.478347][ T5960] veth1_vlan: left promiscuous mode [ 1323.483951][ T5960] veth0_vlan: left promiscuous mode [ 1323.936359][ T8168] libceph: connect (1)[c::]:6789 error -101 [ 1323.943795][ T8168] libceph: mon0 (1)[c::]:6789 connect error [ 1323.992276][T12330] ceph: No mds server is up or the cluster is laggy [ 1324.397229][T12133] Bluetooth: hci2: command tx timeout [ 1330.822250][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 1330.900928][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 1331.088143][T12351] fuse: Unknown parameter 'grou00000000000000000000' [ 1331.975057][T12220] hsr_slave_0: entered promiscuous mode [ 1332.015283][T12220] hsr_slave_1: entered promiscuous mode [ 1332.891453][ T6167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.958078][T10483] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1333.004616][T12283] chnl_net:caif_netlink_parms(): no params data found [ 1333.150280][ T6167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.168555][T10483] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.187057][T10483] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1333.220746][T10483] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1333.265077][T10483] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1333.283673][T10483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.307194][T10483] usb 7-1: Product: syz [ 1333.311539][T10483] usb 7-1: Manufacturer: syz [ 1333.333817][T10483] usb 7-1: SerialNumber: syz [ 1333.353219][T12131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.414619][ T6167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.629098][T10483] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1333.655610][T10483] uvcvideo 7-1:220.0: No valid video chain found. [ 1333.697916][T10483] usb 7-1: USB disconnect, device number 17 [ 1333.702405][ T6167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.023494][T12131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1334.166001][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.173519][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1334.332392][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.339877][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.173768][T12283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.188599][T12283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.214505][T12283] bridge_slave_0: entered allmulticast mode [ 1335.249696][T12283] bridge_slave_0: entered promiscuous mode [ 1335.334937][ T6167] bridge_slave_1: left allmulticast mode [ 1335.343465][ T6167] bridge_slave_1: left promiscuous mode [ 1335.359995][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.401746][ T6167] bridge_slave_0: left allmulticast mode [ 1335.417281][ T6167] bridge_slave_0: left promiscuous mode [ 1335.423702][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.364632][ T6167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.403322][ T6167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.421717][ T8168] libceph: connect (1)[c::]:6789 error -101 [ 1336.428744][ T8168] libceph: mon0 (1)[c::]:6789 connect error [ 1336.444300][ T6167] bond0 (unregistering): Released all slaves [ 1336.492000][T12391] ceph: No mds server is up or the cluster is laggy [ 1336.613539][T12283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.643865][T12283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.655117][T12283] bridge_slave_1: entered allmulticast mode [ 1336.671073][T12283] bridge_slave_1: entered promiscuous mode [ 1338.561271][T12283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.587700][T12283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.598149][T12220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1339.003673][T12220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1339.287273][ T6167] hsr_slave_0: left promiscuous mode [ 1339.347104][ T6167] hsr_slave_1: left promiscuous mode [ 1339.402403][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.430350][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.490147][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.527123][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.637769][ T6167] veth1_macvtap: left promiscuous mode [ 1339.677820][ T6167] veth0_macvtap: left promiscuous mode [ 1339.683661][ T6167] veth1_vlan: left promiscuous mode [ 1339.748339][ T6167] veth0_vlan: left promiscuous mode [ 1340.152676][T12419] fuse: Unknown parameter 'group_i00000000000000000000' [ 1347.523860][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1347.542930][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1347.556409][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1347.571534][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1347.586253][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1348.177076][ T6167] team0 (unregistering): Port device team_slave_1 removed [ 1348.342044][ T6167] team0 (unregistering): Port device team_slave_0 removed [ 1349.186392][T12220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1349.352580][T12220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1349.678735][T12133] Bluetooth: hci5: command tx timeout [ 1350.073100][T12283] team0: Port device team_slave_0 added [ 1350.137700][T12283] team0: Port device team_slave_1 added [ 1350.610214][T12283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.627376][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.687124][T12283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.830038][T12283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.867266][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.957042][T12283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.286609][ T8168] libceph: connect (1)[c::]:6789 error -101 [ 1351.358096][ T8168] libceph: mon0 (1)[c::]:6789 connect error [ 1351.375724][T12455] ceph: No mds server is up or the cluster is laggy [ 1351.767309][T12133] Bluetooth: hci5: command tx timeout [ 1351.838696][T12283] hsr_slave_0: entered promiscuous mode [ 1351.898954][T12283] hsr_slave_1: entered promiscuous mode [ 1351.938943][T12283] debugfs: 'hsr0' already exists in 'hsr' [ 1351.944832][T12283] Cannot create hsr debugfs directory [ 1353.933577][T12133] Bluetooth: hci5: command tx timeout [ 1355.997267][ T5780] Bluetooth: hci5: command tx timeout [ 1356.324966][T12434] chnl_net:caif_netlink_parms(): no params data found [ 1356.618185][T12504] fuse: Unknown parameter 'group_i00000000000000000000' [ 1356.886131][T12220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.844862][ T1143] bridge_slave_1: left allmulticast mode [ 1358.902923][ T1143] bridge_slave_1: left promiscuous mode [ 1358.960119][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.026572][ T1143] bridge_slave_0: left allmulticast mode [ 1359.056444][ T1143] bridge_slave_0: left promiscuous mode [ 1359.087992][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.103380][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.237325][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.297383][ T1143] bond0 (unregistering): Released all slaves [ 1360.829178][ T1143] hsr_slave_0: left promiscuous mode [ 1360.858251][ T1143] hsr_slave_1: left promiscuous mode [ 1360.898415][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.969764][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.560476][T12133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1362.592326][T12133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1362.612199][T12133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1362.628733][T12133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1362.660111][T12133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1363.550589][T10483] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1363.751714][T10483] usb 7-1: Using ep0 maxpacket: 32 [ 1363.818054][T10483] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.848829][T10483] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1364.091180][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 1364.504797][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 1364.719029][ T5780] Bluetooth: hci0: command tx timeout [ 1364.791358][T10483] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1364.802819][T10483] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1364.868224][T10483] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1364.882260][T10483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.785839][T10483] usb 7-1: Product: syz [ 1365.791564][T10483] usb 7-1: Manufacturer: syz [ 1365.796341][T10483] usb 7-1: SerialNumber: syz [ 1365.834578][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1366.316374][T10483] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input7 [ 1366.417793][T10483] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1366.426220][T10483] (id 0x00) [ 1366.600269][T12434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.633252][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.651880][T12434] bridge_slave_0: entered allmulticast mode [ 1366.670214][T12434] bridge_slave_0: entered promiscuous mode [ 1366.730862][T12434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.738220][T10483] rc_core: IR keymap rc-imon-pad not found [ 1366.744441][T10483] Registered IR keymap rc-empty [ 1366.751422][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.759864][T10483] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1366.771491][T12434] bridge_slave_1: entered allmulticast mode [ 1366.782073][T10483] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1366.795091][T12434] bridge_slave_1: entered promiscuous mode [ 1366.800577][ T5780] Bluetooth: hci0: command tx timeout [ 1366.819171][T10483] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1366.919960][T12555] fuse: Unknown parameter 'group_i00000000000000000000' [ 1366.968330][T10483] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input8 [ 1367.009886][T10483] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:18> initialized [ 1367.067067][T10483] usb 7-1: USB disconnect, device number 18 [ 1368.927381][T12133] Bluetooth: hci0: command tx timeout [ 1369.180894][T12434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.274529][T12434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.633853][T12283] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1369.692530][T12283] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1369.915010][T12283] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1370.102880][T12283] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1370.434278][T12434] team0: Port device team_slave_0 added [ 1370.526239][T12434] team0: Port device team_slave_1 added [ 1370.727647][ T7044] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1370.807846][ T8867] libceph: connect (1)[c::]:6789 error -101 [ 1370.819204][ T8867] libceph: mon0 (1)[c::]:6789 connect error [ 1370.836646][T12434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.845574][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.883025][T12585] ceph: No mds server is up or the cluster is laggy [ 1370.895538][T12434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.929602][ T7044] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.960798][ T7044] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1370.962685][T12133] Bluetooth: hci0: command tx timeout [ 1371.011758][ T7044] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1371.053142][ T7044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.077789][T12434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.099900][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.130493][ T7044] usb 8-1: config 0 descriptor?? [ 1371.136729][T12434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.305059][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.311934][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1374.309091][ T1143] bridge_slave_1: left allmulticast mode [ 1374.327087][ T1143] bridge_slave_1: left promiscuous mode [ 1374.338410][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.368138][ T1143] bridge_slave_0: left allmulticast mode [ 1374.374063][ T1143] bridge_slave_0: left promiscuous mode [ 1374.390938][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.268569][ T7044] usbhid 8-1:0.0: can't add hid device: -71 [ 1375.277869][ T7044] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1375.303114][ T7044] usb 8-1: USB disconnect, device number 7 [ 1375.308683][T12616] fuse: Unknown parameter 'group_id00000000000000000000' [ 1375.322783][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.295107][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.340974][ T1143] bond0 (unregistering): Released all slaves [ 1377.425271][T12434] hsr_slave_0: entered promiscuous mode [ 1377.532035][T12434] hsr_slave_1: entered promiscuous mode [ 1377.591617][T12434] debugfs: 'hsr0' already exists in 'hsr' [ 1377.621470][T12434] Cannot create hsr debugfs directory [ 1378.293001][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1378.308545][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1378.323803][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1378.342509][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1378.355087][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1378.437672][ T1143] hsr_slave_0: left promiscuous mode [ 1378.451870][ T1143] hsr_slave_1: left promiscuous mode [ 1378.470266][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.495871][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.522156][ T6166] ===================================================== [ 1378.530280][ T6166] BUG: KMSAN: uninit-value in __inet_bind+0x8a4/0xf20 [ 1378.537296][ T6166] __inet_bind+0x8a4/0xf20 [ 1378.541869][ T6166] inet_bind+0x12c/0x1a0 [ 1378.546270][ T6166] kernel_bind+0xd6/0x130 [ 1378.551163][ T6166] rds_tcp_conn_path_connect+0x952/0xff0 [ 1378.560378][ T6166] rds_connect_worker+0x353/0x4d0 [ 1378.565600][ T6166] process_scheduled_works+0xb21/0x1e30 [ 1378.571521][ T6166] worker_thread+0xede/0x1580 [ 1378.576347][ T6166] kthread+0x53f/0x600 [ 1378.580773][ T6166] ret_from_fork+0x20f/0x910 [ 1378.585554][ T6166] ret_from_fork_asm+0x1a/0x30 [ 1378.591374][ T6166] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1378.593761][ T6166] Uninit was stored to memory at: [ 1378.599494][ T6166] kernel_bind+0x92/0x130 [ 1378.603996][ T6166] rds_tcp_conn_path_connect+0x952/0xff0 [ 1378.611239][ T6166] rds_connect_worker+0x353/0x4d0 [ 1378.616410][ T6166] process_scheduled_works+0xb21/0x1e30 [ 1378.622252][ T6166] worker_thread+0xede/0x1580 [ 1378.627238][ T6166] kthread+0x53f/0x600 [ 1378.631454][ T6166] ret_from_fork+0x20f/0x910 [ 1378.636173][ T6166] ret_from_fork_asm+0x1a/0x30 [ 1378.641261][ T6166] [ 1378.643640][ T6166] Uninit was stored to memory at: [ 1378.649300][ T6166] rds_tcp_conn_path_connect+0xaf8/0xff0 [ 1378.655099][ T6166] rds_connect_worker+0x353/0x4d0 [ 1378.660418][ T6166] process_scheduled_works+0xb21/0x1e30 [ 1378.666112][ T6166] worker_thread+0xede/0x1580 [ 1378.671118][ T6166] kthread+0x53f/0x600 [ 1378.675337][ T6166] ret_from_fork+0x20f/0x910 [ 1378.680299][ T6166] ret_from_fork_asm+0x1a/0x30 [ 1378.685233][ T6166] [ 1378.687765][ T6166] Uninit was created at: [ 1378.692917][ T6166] kmem_cache_alloc_noprof+0x37b/0x1270 [ 1378.699114][ T6166] rds_tcp_conn_alloc+0x7b/0xbb0 [ 1378.704210][ T6166] __rds_conn_create+0x267f/0x34e0 [ 1378.709729][ T6166] rds_conn_create_outgoing+0x5d/0x80 [ 1378.715281][ T6166] rds_sendmsg+0x2684/0x4d70 [ 1378.721770][ T6166] ____sys_sendmsg+0xfe7/0x1080 [ 1378.727310][ T6166] ___sys_sendmsg+0x271/0x3b0 [ 1378.732143][ T6166] __x64_sys_sendmsg+0x211/0x3e0 [ 1378.737472][ T6166] x64_sys_call+0x1e20/0x3ea0 [ 1378.742317][ T6166] do_syscall_64+0x134/0xf80 [ 1378.747338][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.753391][ T6166] [ 1378.755804][ T6166] CPU: 0 UID: 0 PID: 6166 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 1378.765699][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1378.775993][ T6166] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 1378.782474][ T6166] ===================================================== [ 1378.789609][ T6166] Disabling lock debugging due to kernel taint [ 1379.021299][ T6166] Kernel panic - not syncing: kmsan.panic set ... [ 1379.027874][ T6166] CPU: 0 UID: 0 PID: 6166 Comm: kworker/u8:15 Tainted: G B syzkaller #0 PREEMPT(full) [ 1379.039170][ T6166] Tainted: [B]=BAD_PAGE [ 1379.043404][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1379.053581][ T6166] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 1379.059925][ T6166] Call Trace: [ 1379.063281][ T6166] [ 1379.066283][ T6166] __dump_stack+0x26/0x30 [ 1379.070777][ T6166] dump_stack_lvl+0x50/0x1c0 [ 1379.075529][ T6166] ? dump_stack+0x12/0x25 [ 1379.080014][ T6166] dump_stack+0x1e/0x25 [ 1379.084319][ T6166] vpanic+0x7b4/0x1430 [ 1379.088581][ T6166] panic+0x15d/0x160 [ 1379.092678][ T6166] kmsan_report+0x31a/0x320 [ 1379.097352][ T6166] ? __msan_warning+0x1b/0x30 [ 1379.102182][ T6166] ? __inet_bind+0x8a4/0xf20 [ 1379.106937][ T6166] ? inet_bind+0x12c/0x1a0 [ 1379.111519][ T6166] ? kernel_bind+0xd6/0x130 [ 1379.116190][ T6166] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 1379.122173][ T6166] ? rds_connect_worker+0x353/0x4d0 [ 1379.127514][ T6166] ? process_scheduled_works+0xb21/0x1e30 [ 1379.133387][ T6166] ? worker_thread+0xede/0x1580 [ 1379.138378][ T6166] ? kthread+0x53f/0x600 [ 1379.142779][ T6166] ? ret_from_fork+0x20f/0x910 [ 1379.147688][ T6166] ? ret_from_fork_asm+0x1a/0x30 [ 1379.152829][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 1379.158123][ T6166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1379.164120][ T6166] ? __rcu_read_unlock+0x6c/0xd0 [ 1379.169336][ T6166] ? inet_addr_type_table+0x33b/0x560 [ 1379.174890][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 1379.180183][ T6166] __msan_warning+0x1b/0x30 [ 1379.184834][ T6166] __inet_bind+0x8a4/0xf20 [ 1379.189444][ T6166] inet_bind+0x12c/0x1a0 [ 1379.193849][ T6166] ? __pfx_inet_bind+0x10/0x10 [ 1379.198777][ T6166] kernel_bind+0xd6/0x130 [ 1379.203283][ T6166] ? rds_tcp_tune+0x834/0xe60 [ 1379.208121][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 1379.213405][ T6166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1379.219402][ T6166] rds_tcp_conn_path_connect+0x952/0xff0 [ 1379.225243][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 1379.230569][ T6166] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1379.236905][ T6166] rds_connect_worker+0x353/0x4d0 [ 1379.242091][ T6166] ? __pfx_rds_connect_worker+0x10/0x10 [ 1379.247788][ T6166] process_scheduled_works+0xb21/0x1e30 [ 1379.253557][ T6166] worker_thread+0xede/0x1580 [ 1379.258418][ T6166] kthread+0x53f/0x600 [ 1379.262653][ T6166] ? __pfx_worker_thread+0x10/0x10 [ 1379.267924][ T6166] ? __pfx_kthread+0x10/0x10 [ 1379.272680][ T6166] ret_from_fork+0x20f/0x910 [ 1379.277416][ T6166] ? __switch_to+0x51c/0x750 [ 1379.282285][ T6166] ? __pfx_kthread+0x10/0x10 [ 1379.287045][ T6166] ret_from_fork_asm+0x1a/0x30 [ 1379.292003][ T6166] [ 1379.295437][ T6166] Kernel Offset: disabled [ 1379.299798][ T6166] Rebooting in 86400 seconds..