last executing test programs: 23m10.624523613s ago: executing program 32 (id=449): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) read$dsp(r1, &(0x7f0000001380)=""/229, 0xe5) 4m15.443147799s ago: executing program 1 (id=3240): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, 0x0, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 4m12.808602656s ago: executing program 1 (id=3245): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010101, @private=0xa010102, 0x0, 0x2, [@loopback, @rand_addr=0x64010101]}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000a80)={{r4}, "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"}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) 4m8.275289243s ago: executing program 1 (id=3254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x2f126000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 4m1.211604859s ago: executing program 3 (id=3261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) 4m1.047926151s ago: executing program 1 (id=3263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) 3m58.889950247s ago: executing program 3 (id=3265): syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_cache\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', 0xffffffffffffffff, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x0, 0x0, 0x320000) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x7) 3m58.178402259s ago: executing program 1 (id=3268): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40}, {0x4, 0x0, 0x0, 0xfffdf038}, {0x6, 0x1}]}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket(0x25, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00085400ed4189ae6884fa07000000629f6c7adefac29e671079d14538df928c5fa16b3675903a39f2de261b458a7040ca82a0bc3ec714c60d40d70d1612d24b06c92e56ebfe3e9be24b84cef7414bc4d37e3ad2d2871d34"], 0x5c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) 3m54.495574555s ago: executing program 1 (id=3272): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 3m54.193971427s ago: executing program 3 (id=3273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49f, 0x0, &(0x7f0000000340), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 3m52.610209431s ago: executing program 33 (id=3272): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 3m52.541769362s ago: executing program 3 (id=3276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) finit_module(r3, &(0x7f00000001c0)='!$)*\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000080)=0x6) 3m51.371939851s ago: executing program 3 (id=3278): syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x286, 0x0, 0x0) 3m50.829512183s ago: executing program 3 (id=3279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) 3m50.142569235s ago: executing program 34 (id=3279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) 3m43.691151364s ago: executing program 5 (id=3288): syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x286, 0x0, 0x0) 3m40.149322702s ago: executing program 5 (id=3292): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x101, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab", 0xa9}], 0x2}}], 0x1, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) 3m37.695018767s ago: executing program 5 (id=3296): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) 3m34.362845416s ago: executing program 5 (id=3302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 3m33.08686051s ago: executing program 5 (id=3303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 3m32.461550401s ago: executing program 5 (id=3304): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x101, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab", 0xa9}], 0x2}}], 0x1, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) 3m32.011115244s ago: executing program 35 (id=3304): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x101, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab", 0xa9}], 0x2}}], 0x1, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) 3m4.966679359s ago: executing program 8 (id=3305): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x24042840) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) socket$caif_seqpacket(0x25, 0x5, 0x3) socket$packet(0x11, 0xa, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880", 0x23, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xdc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m4.5030612s ago: executing program 8 (id=3347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000980)={0xa, 0x2, 0x400, @loopback, 0xfffffffd}, 0x71) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0xf3b2, @local, 0x80000000}}, 0x0, 0x0, 0x3e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xdd) sendto$inet6(r0, &(0x7f0000000740)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r0, 0x2) 3m4.090824619s ago: executing program 8 (id=3352): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x2021040, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101c, 0x0) 3m3.751778707s ago: executing program 8 (id=3354): creat(&(0x7f00000000c0)='./file0\x00', 0x8b) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX]) 3m3.39108063s ago: executing program 8 (id=3357): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) write(0xffffffffffffffff, &(0x7f0000000180)=' ', 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3m2.915019945s ago: executing program 36 (id=3357): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) write(0xffffffffffffffff, &(0x7f0000000180)=' ', 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2m44.812565206s ago: executing program 4 (id=3481): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r4, 0x0, 0x0, 0x40488c1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000280)) sendto$inet6(r4, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 2m43.749999551s ago: executing program 4 (id=3482): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'ife\x00'}, 0x1a, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0xffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x4c) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180), 0x8}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2m40.401895658s ago: executing program 4 (id=3493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 2m40.222769453s ago: executing program 4 (id=3495): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) chdir(0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) chdir(0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0xa5f}, 0x8) 2m37.901650044s ago: executing program 4 (id=3508): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140)="b3", 0x1, 0x4001, 0x0, 0x0) 2m36.483189357s ago: executing program 4 (id=3515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00000165167c736eec72"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 2m21.361680614s ago: executing program 37 (id=3515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00000165167c736eec72"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 22.667813407s ago: executing program 2 (id=3886): syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_cache\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', 0xffffffffffffffff, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x0, 0x0, 0x320000) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x7) 19.087257533s ago: executing program 2 (id=3894): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) close(r0) 18.612286022s ago: executing program 2 (id=3895): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") syz_emit_ethernet(0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="aab2aaaaaabb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 17.24212726s ago: executing program 2 (id=3902): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 11.773109077s ago: executing program 6 (id=3913): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r0 = socket(0x1f, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], &(0x7f0000000280)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10168, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x25, 0x5, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0x0, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x100) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x4, 0xfffffffffffffffd, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x2, 0x7}, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 11.614353447s ago: executing program 2 (id=3916): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 9.961068503s ago: executing program 6 (id=3918): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) 9.649245035s ago: executing program 2 (id=3921): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40}, {0x4, 0x0, 0x0, 0xfffdf038}, {0x6, 0x1}]}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x80000001, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00085400ed4189ae6884fa07000000629f6c7adefac29e671079d14538df928c5fa16b3675903a39f2de261b458a7040ca82a0bc3ec714c60d40d70d1612d24b06c92e56ebfe3e9be24b84cef7414bc4d37e3ad2d2871d34"], 0x5c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) 9.530932233s ago: executing program 0 (id=3922): syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x83b, 0x1, 0x3, 0x201}, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xebf1bac2d107dab0, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaeaaaabbbbbbbbbbbb08004624002c0068000000063097e12d00ac1414aa0703e20700004e2200"/56, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5401000290780000"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) 9.486339319s ago: executing program 7 (id=3923): syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x83b, 0x1, 0x3, 0x201}, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xebf1bac2d107dab0, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaeaaaabbbbbbbbbbbb08004624002c0068000000063097e12d00ac1414aa0703e20700004e2200"/56, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5401000290780000"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) 9.155002814s ago: executing program 38 (id=3921): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40}, {0x4, 0x0, 0x0, 0xfffdf038}, {0x6, 0x1}]}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x80000001, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00085400ed4189ae6884fa07000000629f6c7adefac29e671079d14538df928c5fa16b3675903a39f2de261b458a7040ca82a0bc3ec714c60d40d70d1612d24b06c92e56ebfe3e9be24b84cef7414bc4d37e3ad2d2871d34"], 0x5c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) 6.928231275s ago: executing program 9 (id=3925): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0xa5f}, 0x8) 6.873307246s ago: executing program 7 (id=3926): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x24042840) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) socket$caif_seqpacket(0x25, 0x5, 0x3) socket$packet(0x11, 0xa, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880", 0x23, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x5c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1a4}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.839960314s ago: executing program 9 (id=3927): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 6.645461493s ago: executing program 9 (id=3928): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000feffff00352b2ac1f8", @ANYRESOCT=r2], 0x50) socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 6.599153836s ago: executing program 0 (id=3929): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r0 = socket(0x1f, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], &(0x7f0000000280)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10168, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x25, 0x5, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0x0, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x100) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x4, 0xfffffffffffffffd, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x2, 0x7}, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.477488564s ago: executing program 9 (id=3930): syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x83b, 0x1, 0x3, 0x201}, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xebf1bac2d107dab0, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) 4.438131505s ago: executing program 6 (id=3931): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4.273612691s ago: executing program 6 (id=3932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 3.809994463s ago: executing program 6 (id=3933): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x38f0c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0xe24, @loopback}}, 0x0, 0x20000000005, 0x21, 0x0, "000000000000000000000000000000efbf47ab0485ba290000000000000000000000000100"}, 0xd8) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 3.152395972s ago: executing program 9 (id=3934): syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_cache\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', 0xffffffffffffffff, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x0, 0x0, 0x320000) r3 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x7) 2.925246781s ago: executing program 7 (id=3935): syz_emit_ethernet(0x1e, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x7e, 0x0, 0x34324152, 0x4, 0x0, [{0x0, 0xf}, {0x20010}, {}, {0x1000000}, {0x3}, {0x2fe}, {0x0, 0x7ff}], 0xf, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x160, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.779828014s ago: executing program 0 (id=3936): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0xa5f}, 0x8) 1.891707541s ago: executing program 0 (id=3937): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 1.749343185s ago: executing program 7 (id=3938): socket$packet(0x11, 0x3, 0x300) socket$kcm(0xa, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40080, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.408720914s ago: executing program 0 (id=3939): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 512.19907ms ago: executing program 9 (id=3940): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xfffffdef}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 404.019867ms ago: executing program 0 (id=3941): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$dsp(r2, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 346.466914ms ago: executing program 7 (id=3942): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 111.881448ms ago: executing program 7 (id=3943): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20880) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 0s ago: executing program 6 (id=3944): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open$dir(0x0, 0x240, 0xb1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x528) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): evice strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.998275][T12661] usb 6-1: config 0 descriptor?? [ 1601.444784][T12661] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 1601.502371][T18848] chnl_net:caif_netlink_parms(): no params data found [ 1601.579771][T12661] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1601.703882][ T5963] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1601.900675][T18957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3298'. [ 1601.987417][T18957] vlan2: entered promiscuous mode [ 1602.006347][T18957] bond0: entered promiscuous mode [ 1602.018895][T18957] bond_slave_0: entered promiscuous mode [ 1602.040538][T18957] bond_slave_1: entered promiscuous mode [ 1602.057273][T18957] batadv0: entered promiscuous mode [ 1602.138970][ T5963] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1602.149791][ T5963] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1602.159430][ T5963] usb 1-1: can't read configurations, error -71 [ 1602.190953][T18870] chnl_net:caif_netlink_parms(): no params data found [ 1602.558807][T18848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.581554][T18848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.599888][T18848] bridge_slave_0: entered allmulticast mode [ 1602.631708][T18848] bridge_slave_0: entered promiscuous mode [ 1602.663224][T18848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.674147][T18848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.692330][T18848] bridge_slave_1: entered allmulticast mode [ 1602.724225][T18848] bridge_slave_1: entered promiscuous mode [ 1602.944107][T12661] usb 6-1: reset high-speed USB device number 52 using dummy_hcd [ 1604.695516][ T55] usb 6-1: USB disconnect, device number 52 [ 1604.920463][T18848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.036836][T18848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.227412][T18870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.246599][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.255000][T18870] bridge_slave_0: entered allmulticast mode [ 1605.263240][T18870] bridge_slave_0: entered promiscuous mode [ 1605.366970][T18848] team0: Port device team_slave_0 added [ 1605.376421][T18848] team0: Port device team_slave_1 added [ 1605.544936][ T3497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.593609][T18870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.636497][T18870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.692607][T18870] bridge_slave_1: entered allmulticast mode [ 1605.736372][T18870] bridge_slave_1: entered promiscuous mode [ 1605.940208][ T3497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.020129][T18848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.038573][T18848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.065801][T18848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.151490][ T3497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.201662][T18870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.252129][T18870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.278912][T18848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.293852][T18848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.375063][T18848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.483843][T12661] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1606.547571][ T3497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.669636][T18870] team0: Port device team_slave_0 added [ 1606.671576][T19010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3306'. [ 1607.060867][T19010] vlan2: entered promiscuous mode [ 1607.096411][T19010] bond0: entered promiscuous mode [ 1607.140450][T19010] bond_slave_0: entered promiscuous mode [ 1607.208068][T19010] bond_slave_1: entered promiscuous mode [ 1607.324604][T12661] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1607.355921][T12661] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1607.376510][T12661] usb 5-1: can't read configurations, error -71 [ 1607.459003][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.471840][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.480576][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1607.495961][T18870] team0: Port device team_slave_1 added [ 1607.502261][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1607.511997][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1607.533823][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1607.556950][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1607.625225][T18848] hsr_slave_0: entered promiscuous mode [ 1607.643219][T18848] hsr_slave_1: entered promiscuous mode [ 1607.657226][T18848] debugfs: 'hsr0' already exists in 'hsr' [ 1607.698895][T18848] Cannot create hsr debugfs directory [ 1607.778083][T18870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1607.796468][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1607.854111][T18870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.008981][T18870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.032619][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.141197][T18870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.349229][T19029] loop0: detected capacity change from 0 to 32768 [ 1608.443010][T19029] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1608.599607][T18870] hsr_slave_0: entered promiscuous mode [ 1608.725502][T18870] hsr_slave_1: entered promiscuous mode [ 1608.731929][T18870] debugfs: 'hsr0' already exists in 'hsr' [ 1608.745875][T18870] Cannot create hsr debugfs directory [ 1608.749496][T19029] XFS (loop0): Ending clean mount [ 1609.002331][T19029] XFS (loop0): Quotacheck needed: Please wait. [ 1609.109650][T19029] XFS (loop0): Quotacheck: Done. [ 1609.264662][T15789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1609.317324][ T3497] bridge_slave_1: left allmulticast mode [ 1609.323000][ T3497] bridge_slave_1: left promiscuous mode [ 1609.333035][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.345736][ T3497] bridge_slave_0: left allmulticast mode [ 1609.351423][ T3497] bridge_slave_0: left promiscuous mode [ 1609.359427][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.616191][ T51] Bluetooth: hci3: command tx timeout [ 1610.818153][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1610.829418][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1610.845186][ T3497] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1610.940311][ T3497] bond0 (unregistering): Released all slaves [ 1611.698361][ T51] Bluetooth: hci3: command tx timeout [ 1612.676690][T18848] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1612.703122][T18848] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1612.786201][ T3497] hsr_slave_0: left promiscuous mode [ 1612.853891][ T3497] hsr_slave_1: left promiscuous mode [ 1612.873940][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1612.895681][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.945432][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1612.952909][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1613.013263][ T3497] veth1_macvtap: left promiscuous mode [ 1613.019107][ T3497] veth0_macvtap: left promiscuous mode [ 1613.031189][ T3497] veth1_vlan: left promiscuous mode [ 1613.036654][ T3497] veth0_vlan: left promiscuous mode [ 1613.773981][ T51] Bluetooth: hci3: command tx timeout [ 1614.364558][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 1614.429593][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 1615.010151][T18848] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1615.112641][T18848] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1615.269571][T19024] chnl_net:caif_netlink_parms(): no params data found [ 1615.372858][T18870] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1615.472915][T18870] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1615.545260][T18870] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1615.558368][T18870] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1615.677294][T19024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.686319][T19024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.695511][T19024] bridge_slave_0: entered allmulticast mode [ 1615.703519][T19024] bridge_slave_0: entered promiscuous mode [ 1615.712947][T19024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.720531][T19024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.728485][T19024] bridge_slave_1: entered allmulticast mode [ 1615.738396][T19024] bridge_slave_1: entered promiscuous mode [ 1615.853966][ T51] Bluetooth: hci3: command tx timeout [ 1615.863016][T19024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.878366][T19024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.083651][T17923] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.162107][T19024] team0: Port device team_slave_0 added [ 1616.207062][T19024] team0: Port device team_slave_1 added [ 1616.260292][T17923] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.390688][T17923] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.413596][T19024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.421261][T19024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1616.486886][T19024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.507490][T19024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.339002][T19024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.370292][T19024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.465627][T17923] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.673894][T12661] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1617.802731][T19122] netlink: 'syz.4.3319': attribute type 10 has an invalid length. [ 1617.858244][T12661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.896874][T12661] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1617.931334][T12661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.013166][T12661] usb 1-1: config 0 descriptor?? [ 1618.343950][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1618.728440][T19122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1618.753270][T19122] batadv0: entered promiscuous mode [ 1618.763172][T19122] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1618.817277][T12661] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 1618.980411][T12661] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input22 [ 1619.012104][T19117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.036988][T19117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.168651][T12661] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1619.277899][T18870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1619.451552][T12661] usb 1-1: USB disconnect, device number 17 [ 1619.634343][T19024] hsr_slave_0: entered promiscuous mode [ 1619.750780][T19024] hsr_slave_1: entered promiscuous mode [ 1619.814641][T19024] debugfs: 'hsr0' already exists in 'hsr' [ 1619.820419][T19024] Cannot create hsr debugfs directory [ 1619.976082][T18848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.022500][T19144] netlink: 'syz.4.3322': attribute type 10 has an invalid length. [ 1622.687432][T18848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.754289][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.761461][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.786485][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.793656][T13826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.890988][T18870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.909803][T17923] bridge_slave_1: left allmulticast mode [ 1622.927824][T17923] bridge_slave_1: left promiscuous mode [ 1622.933709][T17923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.957629][T17923] bridge_slave_0: left allmulticast mode [ 1622.971562][T17923] bridge_slave_0: left promiscuous mode [ 1623.108159][T17923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.908169][T17923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1623.917089][T17923] bond_slave_0: left promiscuous mode [ 1623.927940][T17923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1623.937506][T17923] bond_slave_1: left promiscuous mode [ 1623.950351][T17923] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1623.959343][T17923] batadv0: left promiscuous mode [ 1623.969252][T17923] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1623.984030][T17923] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1624.000686][T17923] bond0 (unregistering): Released all slaves [ 1624.021519][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.028715][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.068689][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.075840][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.152082][T17923] tipc: Left network mode [ 1624.474999][ T5956] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1624.521286][T18870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1624.552481][T17923] hsr_slave_0: left promiscuous mode [ 1624.581883][T17923] hsr_slave_1: left promiscuous mode [ 1624.595136][T17923] batman_adv: batadv0: Interface deactivated: dummy0 [ 1624.601905][T17923] batman_adv: batadv0: Removing interface: dummy0 [ 1624.651151][T17923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1624.656639][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.678971][T17923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.681643][ T5956] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1624.697802][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.727767][T17923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1624.747302][ T5956] usb 5-1: config 0 descriptor?? [ 1624.758071][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 1624.765584][T17923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1624.823497][T17923] veth1_macvtap: left promiscuous mode [ 1624.830283][T17923] veth0_macvtap: left promiscuous mode [ 1624.836087][T17923] veth1_vlan: left promiscuous mode [ 1624.844368][T17923] veth0_vlan: left promiscuous mode [ 1625.056434][T17923] pim6reg (unregistering): left allmulticast mode [ 1625.166136][ T5956] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1625.174286][ T5956] pwc: recv_control_msg error -32 req 02 val 2700 [ 1625.185602][ T5956] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1625.217562][ T5956] pwc: recv_control_msg error -32 req 04 val 1000 [ 1625.226742][ T5956] pwc: recv_control_msg error -32 req 04 val 1300 [ 1625.236064][ T5956] pwc: recv_control_msg error -32 req 04 val 1400 [ 1625.247110][ T5956] pwc: recv_control_msg error -32 req 02 val 2000 [ 1625.257518][ T5956] pwc: recv_control_msg error -32 req 02 val 2100 [ 1625.265521][ T5956] pwc: recv_control_msg error -32 req 04 val 1500 [ 1625.273322][ T5956] pwc: recv_control_msg error -32 req 02 val 2500 [ 1625.287837][ T5956] pwc: recv_control_msg error -32 req 02 val 2400 [ 1625.496681][ T5956] pwc: recv_control_msg error -71 req 02 val 2900 [ 1625.518630][ T5956] pwc: recv_control_msg error -71 req 02 val 2800 [ 1625.536352][ T5956] pwc: recv_control_msg error -71 req 04 val 1100 [ 1625.543819][ T5956] pwc: recv_control_msg error -71 req 04 val 1200 [ 1625.569656][ T5956] pwc: Registered as video103. [ 1625.584041][ T5956] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 1625.644088][ T5956] usb 5-1: USB disconnect, device number 10 [ 1625.868761][T17923] team0 (unregistering): Port device team_slave_1 removed [ 1625.929798][T17923] team0 (unregistering): Port device team_slave_0 removed [ 1626.446958][T19172] No such timeout policy "syz1" [ 1627.203972][T19024] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1627.291509][T19024] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1627.376566][T19024] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1627.419584][T19024] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1627.561917][T12661] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1627.759233][T12661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1627.792240][T12661] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1627.821019][T12661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.856584][T12661] usb 1-1: config 0 descriptor?? [ 1627.916675][T18870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.929944][T18848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.063765][T19024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.131483][T19024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1628.201611][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.208842][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.270669][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.277901][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.301107][T12661] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 1628.414991][T12661] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input24 [ 1628.498902][T19179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.580633][T19179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.684904][T12661] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1629.043174][T12661] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1629.086175][ T5963] usb 1-1: USB disconnect, device number 18 [ 1629.208241][T18870] veth0_vlan: entered promiscuous mode [ 1629.245790][T12661] usb 5-1: Using ep0 maxpacket: 32 [ 1629.258706][T12661] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1629.269104][T12661] usb 5-1: config 0 has no interface number 0 [ 1629.278649][T12661] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1629.290563][T18870] veth1_vlan: entered promiscuous mode [ 1629.298340][T12661] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1629.315502][T12661] usb 5-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1629.335494][T12661] usb 5-1: Product: syz [ 1629.339695][T12661] usb 5-1: Manufacturer: syz [ 1629.345520][T19024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1629.360015][T12661] usb 5-1: SerialNumber: syz [ 1629.360105][T18848] veth0_vlan: entered promiscuous mode [ 1629.377019][T12661] usb 5-1: config 0 descriptor?? [ 1629.394919][T12661] smsc75xx v1.0.0 [ 1629.437780][T18848] veth1_vlan: entered promiscuous mode [ 1629.462179][T18870] veth0_macvtap: entered promiscuous mode [ 1629.491511][T18870] veth1_macvtap: entered promiscuous mode [ 1629.540011][T18848] veth0_macvtap: entered promiscuous mode [ 1629.571223][T18870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.587786][T18848] veth1_macvtap: entered promiscuous mode [ 1629.666686][T18870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.730806][T17604] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.777193][T18848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.823016][T17604] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.843945][T17604] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.868631][T18848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.891702][T19239] loop0: detected capacity change from 0 to 4096 [ 1629.919431][T17604] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.992396][T17604] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.006895][T19239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1630.097632][T17604] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.139457][T17604] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.213963][ T9222] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.262159][T19248] Quota error (device loop0): do_check_range: Getting block 65282 out of range 1-8 [ 1630.266227][T19239] EXT4-fs error (device loop0): ext4_do_update_inode:5567: inode #15: comm syz.0.3333: corrupted inode contents [ 1630.315008][T19248] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1630.365673][T19248] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3333: Failed to acquire dquot type 0 [ 1630.405056][T19239] EXT4-fs error (device loop0): ext4_dirty_inode:6458: inode #15: comm syz.0.3333: mark_inode_dirty error [ 1630.434898][T12661] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1630.450274][ T6029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.457218][T12661] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1630.491861][T12661] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1630.492128][ T6029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.506297][T19239] EXT4-fs error (device loop0): ext4_do_update_inode:5567: inode #15: comm syz.0.3333: corrupted inode contents [ 1630.533342][T17604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.538328][T19024] veth0_vlan: entered promiscuous mode [ 1630.552004][T12661] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1630.557837][T17604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.600858][T12661] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1630.623899][T19239] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.3333: mark_inode_dirty error [ 1630.642461][T17923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.651428][T17923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.658800][T12661] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1630.681993][T19239] EXT4-fs error (device loop0): ext4_do_update_inode:5567: inode #15: comm syz.0.3333: corrupted inode contents [ 1630.695957][T19024] veth1_vlan: entered promiscuous mode [ 1630.701927][T12661] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1630.739995][T19239] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.3333: mark_inode_dirty error [ 1630.752633][T12661] usb 5-1: USB disconnect, device number 11 [ 1630.794258][T17923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.807703][T19239] EXT4-fs error (device loop0): ext4_do_update_inode:5567: inode #15: comm syz.0.3333: corrupted inode contents [ 1630.816175][T17923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.858697][T19239] EXT4-fs error (device loop0): ext4_truncate:4596: inode #15: comm syz.0.3333: mark_inode_dirty error [ 1630.878828][T19239] EXT4-fs error (device loop0) in ext4_setattr:5985: Corrupt filesystem [ 1630.920585][T19024] veth0_macvtap: entered promiscuous mode [ 1630.959085][T19024] veth1_macvtap: entered promiscuous mode [ 1630.980590][T15789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1631.105751][T19024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1631.156177][T19024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1631.173599][T19259] loop4: detected capacity change from 0 to 64 [ 1631.362728][T19259] hfs: unable to locate alternate MDB [ 1631.371667][ T6046] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.609235][ T6046] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.623382][T19259] hfs: continuing without an alternate MDB [ 1631.707857][T13826] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.056441][T13826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.671508][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.708138][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.758959][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.777109][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.806023][T19273] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1633.930750][T19319] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1633.986238][ T30] audit: type=1326 audit(1752092258.903:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19318 comm="syz.0.3350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68cf98e929 code=0x0 [ 1634.770968][T19337] loop4: detected capacity change from 0 to 1024 [ 1634.802608][T19337] EXT4-fs: inline encryption not supported [ 1634.897498][T19337] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1634.942700][T19337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1634.987818][ T9222] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.106251][T16103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1635.319105][ T9222] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.335493][T19349] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1635.363035][ T30] audit: type=1800 audit(1752092260.283:43): pid=19350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3361" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 1635.748491][ T9222] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.812819][T19366] loop4: detected capacity change from 0 to 512 [ 1635.849906][T19363] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1635.865774][T19366] EXT4-fs: Mount option(s) incompatible with ext2 [ 1636.009142][T19363] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 1636.883319][ T9222] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.015320][T13442] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1637.029948][T13442] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1637.039106][T13442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1637.057302][T13442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1637.065006][T13442] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1637.391553][T19397] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1637.816856][ T9222] bridge_slave_1: left allmulticast mode [ 1637.840900][ T9222] bridge_slave_1: left promiscuous mode [ 1637.858450][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.925880][ T9222] bridge_slave_0: left allmulticast mode [ 1637.931832][ T9222] bridge_slave_0: left promiscuous mode [ 1637.952192][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.048275][T19416] Falling back ldisc for ptm0. [ 1639.123558][ T982] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1639.132679][T19425] loop0: detected capacity change from 0 to 1024 [ 1639.144491][ T51] Bluetooth: hci3: command tx timeout [ 1639.145936][T19425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1639.159068][ T982] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1639.286477][T19425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1639.351372][ T9222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.359787][T19425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1639.389590][ T9222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.415077][T19430] loop7: detected capacity change from 0 to 128 [ 1639.448037][ T9222] bond0 (unregistering): Released all slaves [ 1639.512163][T19430] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1639.557641][T15789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.607240][T19430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1640.916526][ T9222] hsr_slave_0: left promiscuous mode [ 1640.943131][ T9222] hsr_slave_1: left promiscuous mode [ 1640.951592][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1640.979739][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.989559][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.008748][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.057573][ T9222] veth1_macvtap: left promiscuous mode [ 1641.071591][ T9222] veth0_macvtap: left promiscuous mode [ 1641.084447][ T9222] veth1_vlan: left promiscuous mode [ 1641.106093][ T9222] veth0_vlan: left promiscuous mode [ 1641.214052][ T51] Bluetooth: hci3: command tx timeout [ 1641.652261][T19486] loop7: detected capacity change from 0 to 2048 [ 1641.706747][T19487] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1642.086090][T18870] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 1642.098786][T18870] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1642.135158][T18870] Remounting filesystem read-only [ 1642.141226][T18870] NILFS (loop7): error -5 truncating bmap (ino=16) [ 1642.166326][T18870] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 1642.329046][ T9222] team0 (unregistering): Port device team_slave_1 removed [ 1642.388088][ T9222] team0 (unregistering): Port device team_slave_0 removed [ 1643.070188][T19465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.077875][T19465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.162748][T19465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.178571][T19465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1643.295451][ T51] Bluetooth: hci3: command tx timeout [ 1643.374416][ T6029] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.384506][T19388] chnl_net:caif_netlink_parms(): no params data found [ 1643.477811][T19495] create_pit_timer: 46 callbacks suppressed [ 1643.477827][T19495] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1643.498122][ T6029] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.524055][ T6029] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.533011][ T6029] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.610491][T19500] loop7: detected capacity change from 0 to 256 [ 1643.761325][T19500] FAT-fs (loop7): Directory bread(block 64) failed [ 1643.773898][T19500] FAT-fs (loop7): Directory bread(block 65) failed [ 1643.792445][T19500] FAT-fs (loop7): Directory bread(block 66) failed [ 1643.816294][T19500] FAT-fs (loop7): Directory bread(block 67) failed [ 1643.823286][T19500] FAT-fs (loop7): Directory bread(block 68) failed [ 1643.831162][T19500] FAT-fs (loop7): Directory bread(block 69) failed [ 1643.838030][T19500] FAT-fs (loop7): Directory bread(block 70) failed [ 1643.846178][T19500] FAT-fs (loop7): Directory bread(block 71) failed [ 1643.853028][T19500] FAT-fs (loop7): Directory bread(block 72) failed [ 1643.866325][T19500] FAT-fs (loop7): Directory bread(block 73) failed [ 1644.004905][T19388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.012206][T19388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.046223][T19388] bridge_slave_0: entered allmulticast mode [ 1644.076549][T19388] bridge_slave_0: entered promiscuous mode [ 1644.115777][T19388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.115871][T19388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.116051][T19388] bridge_slave_1: entered allmulticast mode [ 1644.152345][T19388] bridge_slave_1: entered promiscuous mode [ 1644.345353][T19527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3411'. [ 1644.362031][T19388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.446794][T19388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.681163][T19388] team0: Port device team_slave_0 added [ 1644.706007][T19388] team0: Port device team_slave_1 added [ 1644.920176][T19546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3416'. [ 1644.942482][T19549] loop6: detected capacity change from 0 to 256 [ 1644.972196][T19388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.005279][T19388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.068291][T19549] exFAT-fs (loop6): error, The cluster chain has a loop [ 1645.097714][T19553] loop0: detected capacity change from 0 to 128 [ 1645.104110][T19549] exFAT-fs (loop6): Filesystem has been set read-only [ 1645.110885][T19549] exFAT-fs (loop6): failed to count the number of clusters in root [ 1645.129711][T19553] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1645.159144][T19388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.169845][T19549] exFAT-fs (loop6): failed to recognize exfat type [ 1645.212569][T19553] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1645.249826][T19388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.258546][T19388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.285049][T19388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.351933][T19553] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1645.401210][ T51] Bluetooth: hci3: command tx timeout [ 1645.424965][T19553] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 1645.449934][T19388] hsr_slave_0: entered promiscuous mode [ 1645.511087][T19388] hsr_slave_1: entered promiscuous mode [ 1645.539058][T19560] loop4: detected capacity change from 0 to 4096 [ 1645.540412][T19388] debugfs: 'hsr0' already exists in 'hsr' [ 1645.580389][T19388] Cannot create hsr debugfs directory [ 1645.603040][T15789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1645.889380][T19570] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 3, id = 0 [ 1646.105696][ T30] audit: type=1800 audit(1752092271.033:44): pid=19574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3426" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 1646.557652][T19388] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1646.627870][T19388] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1646.688571][T19593] loop6: detected capacity change from 0 to 1024 [ 1646.695164][T19388] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1646.742197][T19388] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1646.960921][T19593] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3432'. [ 1647.076191][ T9222] hfsplus: b-tree write err: -5, ino 4 [ 1647.124892][T19388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.219163][T19388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.248743][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.255991][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.312424][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.319665][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.480552][T19388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1647.974221][ T5986] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1647.997379][T19388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.128823][T12347] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1648.154189][ T5986] usb 5-1: Using ep0 maxpacket: 8 [ 1648.161950][ T5986] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1648.181525][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.202820][ T5986] usb 5-1: config 0 descriptor?? [ 1648.295857][T12347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.317117][T12347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.346260][T12347] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1648.369529][T12347] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1648.394831][T12347] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.433339][T12347] usb 8-1: config 0 descriptor?? [ 1648.544990][T19388] veth0_vlan: entered promiscuous mode [ 1648.575195][T19388] veth1_vlan: entered promiscuous mode [ 1648.631668][ T5986] nti 0003:0757:0A00.000D: unknown main item tag 0x6 [ 1648.653653][ T5986] nti 0003:0757:0A00.000D: item fetching failed at offset 3/5 [ 1648.672369][ T5986] nti 0003:0757:0A00.000D: probe with driver nti failed with error -22 [ 1648.690963][T19388] veth0_macvtap: entered promiscuous mode [ 1648.752315][T19388] veth1_macvtap: entered promiscuous mode [ 1648.827717][ T5986] usb 5-1: USB disconnect, device number 12 [ 1648.889601][T12347] usbhid 8-1:0.0: can't add hid device: -71 [ 1648.908969][T12347] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1648.923480][T19388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.937721][T12347] usb 8-1: USB disconnect, device number 2 [ 1648.957269][T19388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.991952][ T6029] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.057271][ T6029] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.076274][ T6029] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.098923][ T6029] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.182774][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.213928][T13442] Bluetooth: hci5: command 0x1003 tx timeout [ 1649.214186][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1649.222752][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.396057][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.426410][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.973798][T19692] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 3, id = 0 [ 1650.070791][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3457'. [ 1650.207655][T19702] loop6: detected capacity change from 0 to 512 [ 1650.284626][T19704] loop4: detected capacity change from 0 to 1024 [ 1650.311078][T19702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1650.383916][T19702] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.426997][T19704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1650.492801][T19704] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.698448][T18848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.711955][ T30] audit: type=1800 audit(1752092275.613:45): pid=19704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3459" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1651.169510][T19737] loop9: detected capacity change from 0 to 256 [ 1651.216099][T19719] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1651.241947][T19737] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1651.266676][T19737] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1651.279138][ T6029] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1651.302432][T19742] loop7: detected capacity change from 0 to 1024 [ 1651.329021][T19742] EXT4-fs: Ignoring removed oldalloc option [ 1651.339176][T19737] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1651.353048][T19742] EXT4-fs: Ignoring removed orlov option [ 1651.366551][ T5892] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1651.369540][ T6029] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1651.396470][T19742] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1651.424421][T19719] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.444225][ T30] audit: type=1800 audit(1752092276.363:46): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3470" name="file3" dev="loop9" ino=1048756 res=0 errno=0 [ 1651.470665][ T6029] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1651.470665][ T6029] [ 1651.473782][T19719] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1651.496213][T19742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1651.510410][ T6029] EXT4-fs (loop4): Total free blocks count 0 [ 1651.517753][ T6029] EXT4-fs (loop4): Free/Dirty block details [ 1651.527498][ T6029] EXT4-fs (loop4): free_blocks=4293918720 [ 1651.534289][ T6029] EXT4-fs (loop4): dirty_blocks=16 [ 1651.539523][ T6029] EXT4-fs (loop4): Block reservation details [ 1651.545659][T19719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.545707][ T6029] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1651.563099][T16103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.599395][T19719] usb 7-1: config 0 descriptor?? [ 1651.606478][ T5892] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 1651.617135][ T5892] usb 1-1: config 0 has no interface number 0 [ 1651.628199][ T5892] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1651.660779][ T5892] usb 1-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1651.668845][T19719] pwc: Askey VC010 type 2 USB webcam detected. [ 1651.721507][ T5892] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1651.769299][ T5892] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 1651.769365][T18870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.789177][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.809549][ T5892] usb 1-1: Product: syz [ 1651.837600][ T5892] usb 1-1: Manufacturer: syz [ 1651.842233][ T5892] usb 1-1: SerialNumber: syz [ 1651.864829][T19719] pwc: send_video_command error -71 [ 1651.883005][T19719] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1651.901772][ T5892] usb 1-1: config 0 descriptor?? [ 1651.913271][T19719] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1651.922837][T19734] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1651.923117][T19734] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1652.022268][T19719] usb 7-1: USB disconnect, device number 2 [ 1652.112362][T19758] loop9: detected capacity change from 0 to 512 [ 1652.122311][T19758] ext4: Unknown parameter 'smackfsdef' [ 1652.139790][ T5892] usb 1-1: Error in usbnet_get_endpoints (-71) [ 1652.196721][ T5892] usb 1-1: USB disconnect, device number 19 [ 1652.412780][T19758] loop9: detected capacity change from 0 to 40427 [ 1652.429478][T19758] F2FS-fs (loop9): invalid crc value [ 1652.479616][T19758] F2FS-fs (loop9): Start checkpoint disabled! [ 1652.500986][T19758] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1652.574850][ T3497] kworker/u8:7: attempt to access beyond end of device [ 1652.574850][ T3497] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1652.631989][ T3497] CPU: 1 UID: 0 PID: 3497 Comm: kworker/u8:7 Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 PREEMPT(full) [ 1652.632017][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1652.632027][ T3497] Workqueue: writeback wb_workfn (flush-7:9) [ 1652.632063][ T3497] Call Trace: [ 1652.632069][ T3497] [ 1652.632077][ T3497] dump_stack_lvl+0x189/0x250 [ 1652.632099][ T3497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1652.632113][ T3497] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1652.632134][ T3497] ? __pfx_queue_work_on+0x10/0x10 [ 1652.632153][ T3497] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1652.632176][ T3497] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1652.632210][ T3497] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1652.632238][ T3497] f2fs_handle_critical_error+0x37c/0x540 [ 1652.632260][ T3497] f2fs_write_end_io+0x495/0x810 [ 1652.632275][ T3497] ? blkg_put+0x22/0x240 [ 1652.632306][ T3497] __submit_merged_bio+0x27a/0x6a0 [ 1652.632337][ T3497] __submit_merged_write_cond+0x255/0x530 [ 1652.632365][ T3497] f2fs_write_data_pages+0x261d/0x3000 [ 1652.632413][ T3497] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1652.632443][ T3497] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1652.632501][ T3497] ? kvm_sched_clock_read+0x11/0x20 [ 1652.632540][ T3497] ? update_curr_se+0x8d/0x230 [ 1652.632569][ T3497] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1652.632586][ T3497] do_writepages+0x32e/0x550 [ 1652.632611][ T3497] ? reacquire_held_locks+0x127/0x1d0 [ 1652.632635][ T3497] ? writeback_sb_inodes+0x384/0x1010 [ 1652.632661][ T3497] __writeback_single_inode+0x145/0xff0 [ 1652.632679][ T3497] ? do_raw_spin_unlock+0x122/0x240 [ 1652.632702][ T3497] writeback_sb_inodes+0x6c7/0x1010 [ 1652.632741][ T3497] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1652.632800][ T3497] ? rcu_is_watching+0x15/0xb0 [ 1652.632827][ T3497] wb_writeback+0x43b/0xaf0 [ 1652.632854][ T3497] ? queue_io+0x341/0x590 [ 1652.632875][ T3497] ? __pfx_wb_writeback+0x10/0x10 [ 1652.632901][ T3497] ? _raw_spin_unlock_irq+0x23/0x50 [ 1652.632926][ T3497] wb_workfn+0x409/0xef0 [ 1652.632964][ T3497] ? __pfx_wb_workfn+0x10/0x10 [ 1652.632991][ T3497] ? __lock_acquire+0xab9/0xd20 [ 1652.633024][ T3497] ? process_scheduled_works+0x9ef/0x17b0 [ 1652.633048][ T3497] ? _raw_spin_unlock_irq+0x23/0x50 [ 1652.633067][ T3497] ? process_scheduled_works+0x9ef/0x17b0 [ 1652.633083][ T3497] ? process_scheduled_works+0x9ef/0x17b0 [ 1652.633101][ T3497] process_scheduled_works+0xae1/0x17b0 [ 1652.633140][ T3497] ? __pfx_process_scheduled_works+0x10/0x10 [ 1652.633174][ T3497] worker_thread+0x8a0/0xda0 [ 1652.633213][ T3497] ? __kthread_parkme+0x7b/0x200 [ 1652.633244][ T3497] kthread+0x70e/0x8a0 [ 1652.633266][ T3497] ? __pfx_worker_thread+0x10/0x10 [ 1652.633281][ T3497] ? __pfx_kthread+0x10/0x10 [ 1652.633302][ T3497] ? _raw_spin_unlock_irq+0x23/0x50 [ 1652.633321][ T3497] ? lockdep_hardirqs_on+0x9c/0x150 [ 1652.633340][ T3497] ? __pfx_kthread+0x10/0x10 [ 1652.633360][ T3497] ret_from_fork+0x3fc/0x770 [ 1652.633379][ T3497] ? __pfx_ret_from_fork+0x10/0x10 [ 1652.633400][ T3497] ? __switch_to_asm+0x39/0x70 [ 1652.633417][ T3497] ? __switch_to_asm+0x33/0x70 [ 1652.633431][ T3497] ? __pfx_kthread+0x10/0x10 [ 1652.633450][ T3497] ret_from_fork_asm+0x1a/0x30 [ 1652.633484][ T3497] [ 1652.633608][ T3497] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1652.653906][T19719] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1653.304036][T19773] loop7: detected capacity change from 0 to 164 [ 1653.327314][T19719] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.377158][T19719] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1653.422961][T19719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.623098][T19786] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1653.666120][T19719] usb 7-1: config 0 descriptor?? [ 1653.678579][T19719] pwc: Askey VC010 type 2 USB webcam detected. [ 1653.706897][T19785] tipc: Started in network mode [ 1653.790069][T19785] tipc: Node identity ac1414aa, cluster identity 4711 [ 1653.813424][T19785] tipc: Enabled bearer , priority 10 [ 1654.098267][T19719] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1654.237388][T19788] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1654.243951][T19788] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1654.279163][T19719] pwc: recv_control_msg error -32 req 02 val 2700 [ 1654.357415][T19719] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1654.368520][T19719] pwc: recv_control_msg error -32 req 04 val 1000 [ 1654.376579][T19719] pwc: recv_control_msg error -32 req 04 val 1300 [ 1654.384111][T19719] pwc: recv_control_msg error -32 req 04 val 1400 [ 1654.394062][T19719] pwc: recv_control_msg error -32 req 02 val 2000 [ 1654.404018][T19719] pwc: recv_control_msg error -32 req 02 val 2100 [ 1654.411308][T19719] pwc: recv_control_msg error -32 req 04 val 1500 [ 1654.433218][T19719] pwc: recv_control_msg error -32 req 02 val 2500 [ 1654.457678][T19719] pwc: recv_control_msg error -32 req 02 val 2400 [ 1654.471699][T19719] pwc: recv_control_msg error -32 req 02 val 2600 [ 1654.495083][T19719] pwc: recv_control_msg error -32 req 02 val 2900 [ 1654.504291][T19788] vhci_hcd vhci_hcd.0: Device attached [ 1654.608949][T19789] vhci_hcd: connection closed [ 1654.609444][ T6046] vhci_hcd: stop threads [ 1654.630045][ T6046] vhci_hcd: release socket [ 1654.637679][ T6046] vhci_hcd: disconnect device [ 1654.839269][T19719] pwc: recv_control_msg error -71 req 04 val 1100 [ 1654.879028][T19719] pwc: recv_control_msg error -71 req 04 val 1200 [ 1654.926306][ T6048] tipc: Node number set to 2886997162 [ 1654.998093][T19719] pwc: Registered as video103. [ 1655.041582][T19719] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 1655.117410][T19719] usb 7-1: USB disconnect, device number 3 [ 1655.831231][T19804] sp0: Synchronizing with TNC [ 1655.873818][T19719] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1655.923949][ T6048] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1656.026898][T19719] usb 7-1: Using ep0 maxpacket: 32 [ 1656.038133][T19719] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1656.076625][T19719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.085438][ T6048] usb 1-1: Using ep0 maxpacket: 16 [ 1656.105490][ T6048] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 1656.120531][T19719] usb 7-1: Product: syz [ 1656.124992][ T6048] usb 1-1: config 0 has no interface number 0 [ 1656.139210][T19719] usb 7-1: Manufacturer: syz [ 1656.148211][ T6048] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.165644][T19719] usb 7-1: SerialNumber: syz [ 1656.191513][T19719] usb 7-1: config 0 descriptor?? [ 1656.211437][ T6048] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.226925][T19719] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1656.245886][ T6048] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1656.287061][ T6048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.344774][ T6048] usb 1-1: config 0 descriptor?? [ 1656.456710][T19719] gspca_ov534_9: reg_w failed -71 [ 1656.829626][ T6048] usbhid 1-1:0.128: can't add hid device: -71 [ 1656.844485][ T6048] usbhid 1-1:0.128: probe with driver usbhid failed with error -71 [ 1656.865477][ T6048] usb 1-1: USB disconnect, device number 20 [ 1656.883813][T19719] gspca_ov534_9: Unknown sensor 0000 [ 1656.883918][T19719] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1657.129208][T19719] usb 7-1: USB disconnect, device number 4 [ 1660.353018][T19890] sp0: Synchronizing with TNC [ 1660.688579][T19912] Cannot find add_set index 1 as target [ 1662.482155][T19947] No such timeout policy "syz1" [ 1662.609407][T19949] No such timeout policy "syz1" [ 1665.173764][ T982] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1665.184721][ T6048] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1665.323963][ T982] usb 8-1: Using ep0 maxpacket: 32 [ 1665.343782][ T6048] usb 10-1: Using ep0 maxpacket: 16 [ 1665.368570][ T6048] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 1665.398914][ T982] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1665.422191][ T982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.457560][ T6048] usb 10-1: config 0 has no interface number 0 [ 1665.508728][ T6048] usb 10-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.520360][ T982] usb 8-1: Product: syz [ 1665.635221][ T982] usb 8-1: Manufacturer: syz [ 1665.661927][ T982] usb 8-1: SerialNumber: syz [ 1665.666748][ T6048] usb 10-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.698247][ T982] usb 8-1: config 0 descriptor?? [ 1665.703470][ T6048] usb 10-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1665.734977][ T982] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1665.753252][ T6048] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.814869][ T6048] usb 10-1: config 0 descriptor?? [ 1666.259940][ T6048] usbhid 10-1:0.128: can't add hid device: -71 [ 1666.288117][ T6048] usbhid 10-1:0.128: probe with driver usbhid failed with error -71 [ 1666.355007][ T6048] usb 10-1: USB disconnect, device number 2 [ 1667.241792][ T982] gspca_stk1135: reg_w 0x7 err -110 [ 1667.250135][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1667.280993][ T982] gspca_stk1135: Sensor write failed [ 1667.308958][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1667.326405][ T982] gspca_stk1135: Sensor write failed [ 1667.331751][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1667.410142][ T982] gspca_stk1135: Sensor read failed [ 1667.428863][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1667.496522][ T982] gspca_stk1135: Sensor read failed [ 1667.501760][ T982] gspca_stk1135: Detected sensor type unknown (0x0) [ 1667.572768][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1667.602369][ T982] gspca_stk1135: Sensor read failed [ 1667.645054][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1667.681069][ T982] gspca_stk1135: Sensor read failed [ 1667.687398][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1667.747581][ T982] gspca_stk1135: Sensor write failed [ 1667.752922][ T982] gspca_stk1135: serial bus timeout: status=0x00 [ 1667.807409][ T982] gspca_stk1135: Sensor write failed [ 1667.812817][ T982] stk1135 8-1:0.0: probe with driver stk1135 failed with error -110 [ 1668.209391][T20020] netlink: 'syz.6.3537': attribute type 10 has an invalid length. [ 1668.241693][T20020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.289196][T20020] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1668.899702][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.080453][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.165969][T19994] loop0: detected capacity change from 0 to 32768 [ 1669.182637][ T5892] usb 8-1: USB disconnect, device number 3 [ 1669.328419][T19994] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1669.397676][T19994] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 1669.398293][T19994] XFS (loop0): log mount failed [ 1669.625545][T20033] loop9: detected capacity change from 0 to 4096 [ 1670.354820][T20057] syz.7.3540 (20057): drop_caches: 2 [ 1670.555870][T20055] No such timeout policy "syz1" [ 1670.728849][T20035] Cannot find add_set index 1 as target [ 1673.963747][T12661] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1674.148698][T12661] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.172058][T12661] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1674.203834][T12661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.223988][T12661] usb 1-1: config 0 descriptor?? [ 1674.240105][T12661] pwc: Askey VC010 type 2 USB webcam detected. [ 1674.433891][ T982] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1674.453469][T12661] pwc: send_video_command error -71 [ 1674.466259][T12661] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1674.497271][T12661] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1674.541153][T12661] usb 1-1: USB disconnect, device number 21 [ 1674.628952][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.646557][ T982] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1674.658692][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.717446][ T982] usb 7-1: config 0 descriptor?? [ 1674.904495][ T5956] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1674.975310][T12661] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1675.100269][ T5956] usb 8-1: Using ep0 maxpacket: 32 [ 1675.122048][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.144006][ T5956] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1675.185502][ T982] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 1675.216802][ T982] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.000E/input/input26 [ 1675.246354][T12661] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.361056][ T5956] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.369658][T12661] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1675.385452][T20110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.386971][ T5956] usb 8-1: config 0 descriptor?? [ 1675.398934][T12661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.417101][T12661] usb 1-1: config 0 descriptor?? [ 1675.425269][ T5956] hub 8-1:0.0: USB hub found [ 1675.433970][T12661] pwc: Askey VC010 type 2 USB webcam detected. [ 1675.442999][T20110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.642383][ T5956] hub 8-1:0.0: 1 port detected [ 1675.834148][T12661] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1675.844976][T12661] pwc: recv_control_msg error -32 req 02 val 2700 [ 1675.862409][T12661] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1675.960613][T12661] pwc: recv_control_msg error -32 req 04 val 1000 [ 1676.004686][T12661] pwc: recv_control_msg error -32 req 04 val 1300 [ 1676.009188][ T982] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1676.013219][T12661] pwc: recv_control_msg error -32 req 04 val 1400 [ 1676.089916][T12661] pwc: recv_control_msg error -32 req 02 val 2000 [ 1676.098517][ T5956] usb 8-1: USB disconnect, device number 4 [ 1676.106690][T12661] pwc: recv_control_msg error -32 req 02 val 2100 [ 1676.144681][T12661] pwc: recv_control_msg error -32 req 04 val 1500 [ 1676.170407][T12661] pwc: recv_control_msg error -32 req 02 val 2500 [ 1676.178738][ T982] usb 7-1: USB disconnect, device number 5 [ 1676.234052][T12661] pwc: recv_control_msg error -32 req 02 val 2400 [ 1676.251246][T12661] pwc: recv_control_msg error -32 req 02 val 2600 [ 1676.272662][T12661] pwc: recv_control_msg error -32 req 02 val 2900 [ 1676.313881][T12661] pwc: recv_control_msg error -71 req 02 val 2800 [ 1676.322048][T20134] fido_id[20134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1676.364649][T12661] pwc: recv_control_msg error -71 req 04 val 1100 [ 1676.383864][T12661] pwc: recv_control_msg error -71 req 04 val 1200 [ 1676.433528][T12661] pwc: Registered as video103. [ 1676.457925][T12661] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 1676.547126][T12661] usb 1-1: USB disconnect, device number 22 [ 1678.052659][T20168] sp0: Synchronizing with TNC [ 1678.490106][T13442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1678.504524][T13442] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1678.526441][T13442] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1678.546419][T13442] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1678.557682][T13442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1680.663883][ T51] Bluetooth: hci5: command tx timeout [ 1681.034272][T20180] chnl_net:caif_netlink_parms(): no params data found [ 1681.165742][T20217] C: renamed from team_slave_0 (while UP) [ 1681.229065][T20217] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3573'. [ 1681.353778][ T5892] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1681.575802][T20225] netlink: 'syz.0.3576': attribute type 10 has an invalid length. [ 1682.164113][ T5892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.230582][ T5892] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1682.303801][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.734541][ T51] Bluetooth: hci5: command tx timeout [ 1682.788726][ T5892] usb 7-1: config 0 descriptor?? [ 1682.817536][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 1682.880937][T20180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.915611][T20180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.952651][T20180] bridge_slave_0: entered allmulticast mode [ 1682.979297][T20180] bridge_slave_0: entered promiscuous mode [ 1682.993319][T19926] Set syz1 is full, maxelem 65536 reached [ 1683.031418][T20180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.053941][ T5892] pwc: send_video_command error -71 [ 1683.067061][ T5892] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1683.084503][T20180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.102029][ T5892] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1683.115008][T20180] bridge_slave_1: entered allmulticast mode [ 1683.146051][T20180] bridge_slave_1: entered promiscuous mode [ 1683.165755][ T5892] usb 7-1: USB disconnect, device number 6 [ 1683.319995][T20180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1683.380108][T20180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.504357][T20180] team0: Port device team_slave_0 added [ 1683.570681][T20180] team0: Port device team_slave_1 added [ 1683.633806][ T5892] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1684.813871][ T51] Bluetooth: hci5: command tx timeout [ 1684.849282][ T5892] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1684.858797][ T5892] usb 7-1: can't read configurations, error -71 [ 1684.903620][T20180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.915729][T20180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.950435][T20180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.982368][T20180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.001267][T20180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.102458][T12347] IPVS: starting estimator thread 0... [ 1685.180402][T20180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.205501][T20260] loop6: detected capacity change from 0 to 256 [ 1685.263930][T20257] IPVS: using max 33 ests per chain, 79200 per kthread [ 1685.757487][T20260] FAT-fs (loop6): Directory bread(block 64) failed [ 1685.823956][T20260] FAT-fs (loop6): Directory bread(block 65) failed [ 1685.830616][T20260] FAT-fs (loop6): Directory bread(block 66) failed [ 1685.883848][T20260] FAT-fs (loop6): Directory bread(block 67) failed [ 1685.918034][T20260] FAT-fs (loop6): Directory bread(block 68) failed [ 1685.954815][T20260] FAT-fs (loop6): Directory bread(block 69) failed [ 1685.968196][T20260] FAT-fs (loop6): Directory bread(block 70) failed [ 1686.066601][T20260] FAT-fs (loop6): Directory bread(block 71) failed [ 1686.107259][T20260] FAT-fs (loop6): Directory bread(block 72) failed [ 1686.219432][T20260] FAT-fs (loop6): Directory bread(block 73) failed [ 1686.904584][ T51] Bluetooth: hci5: command tx timeout [ 1687.234485][T20180] hsr_slave_0: entered promiscuous mode [ 1687.274311][T20180] hsr_slave_1: entered promiscuous mode [ 1687.280732][T20180] debugfs: 'hsr0' already exists in 'hsr' [ 1687.322938][T20180] Cannot create hsr debugfs directory [ 1687.780979][T20291] C: renamed from team_slave_0 (while UP) [ 1687.849566][T20291] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1688.124396][ T982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1688.706942][T20304] loop0: detected capacity change from 0 to 4096 [ 1688.735568][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1690.250943][T20315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1690.437464][T13826] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1691.373940][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1691.627952][T20180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.424003][ T6045] bridge_slave_1: left allmulticast mode [ 1692.623295][ T6045] bridge_slave_1: left promiscuous mode [ 1692.636326][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.707329][ T6045] bridge_slave_0: left allmulticast mode [ 1692.723952][ T6045] bridge_slave_0: left promiscuous mode [ 1692.729802][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.552518][ T6048] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1693.723915][ T6048] usb 1-1: Using ep0 maxpacket: 32 [ 1693.733274][ T6048] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1693.763864][ T6048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.771933][ T6048] usb 1-1: Product: syz [ 1693.794441][ T4617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1693.831619][ T6048] usb 1-1: Manufacturer: syz [ 1694.494202][ T6048] usb 1-1: SerialNumber: syz [ 1694.524607][ T6048] usb 1-1: config 0 descriptor?? [ 1694.545043][ T6048] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1694.776005][ T6048] gspca_ov534_9: reg_w failed -71 [ 1694.855364][T20358] 9pnet_fd: Insufficient options for proto=fd [ 1695.593990][ T6048] gspca_ov534_9: Unknown sensor 0000 [ 1695.594075][ T6048] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1695.790089][ T6048] usb 1-1: USB disconnect, device number 23 [ 1696.012766][T20376] netlink: 'syz.0.3612': attribute type 10 has an invalid length. [ 1696.439377][ T9222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1697.000834][T20371] loop6: detected capacity change from 0 to 4096 [ 1697.075756][T20380] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1697.548690][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.558757][ T6045] bond_slave_0: left promiscuous mode [ 1697.566920][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.594130][ T6045] bond_slave_1: left promiscuous mode [ 1697.601600][ T6045] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1697.612060][ T6045] batadv0: left promiscuous mode [ 1697.618491][ T6045] bond0 (unregistering): Released all slaves [ 1697.713827][ T5985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1698.014815][T20180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.431142][ T982] IPVS: starting estimator thread 0... [ 1698.534217][T20395] IPVS: using max 26 ests per chain, 62400 per kthread [ 1698.697919][T20180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.616132][T13826] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1699.634275][T20180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.966161][ T6045] hsr_slave_0: left promiscuous mode [ 1700.002911][ T6045] hsr_slave_1: left promiscuous mode [ 1700.075150][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.127100][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.179349][T19719] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1701.414575][T20408] loop0: detected capacity change from 0 to 32768 [ 1701.570636][T20408] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1701.748808][T20408] XFS (loop0): Ending clean mount [ 1701.806035][T20408] XFS (loop0): Quotacheck needed: Please wait. [ 1702.034278][T20408] XFS (loop0): Quotacheck: Done. [ 1702.175711][T13826] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1702.229157][T15789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1702.275323][T20442] Falling back ldisc for ttyS3. [ 1702.884448][T20465] No such timeout policy "syz1" [ 1703.568980][T20470] netlink: 'syz.0.3629': attribute type 10 has an invalid length. [ 1704.977763][ T6045] team0 (unregistering): Port device team_slave_1 removed [ 1705.114375][ T6045] team0 (unregistering): Port device team_slave_0 removed [ 1705.376244][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1706.043848][T20481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.053881][T20481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.259942][T20481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1706.298512][T20481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1706.341506][T20486] loop9: detected capacity change from 0 to 32768 [ 1706.395828][T20486] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1706.576663][T20486] XFS (loop9): Ending clean mount [ 1706.596936][T20486] XFS (loop9): Quotacheck needed: Please wait. [ 1706.676855][T20490] sp0: Synchronizing with TNC [ 1706.695862][ T3497] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.754153][ T3497] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.773575][T20486] XFS (loop9): Quotacheck: Done. [ 1706.916849][ T3497] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.932141][T19388] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1706.932605][ T3497] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.695442][T20180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1707.804733][T20180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1707.996135][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1708.302390][T20180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1708.445575][T20180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1709.572282][T20516] sp0: Synchronizing with TNC [ 1709.664443][ T5963] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1709.874283][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.943887][ T5963] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1710.030162][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.097687][T20180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.107459][ T5963] usb 1-1: config 0 descriptor?? [ 1710.181609][ T5963] pwc: Askey VC010 type 2 USB webcam detected. [ 1710.218377][T20545] loop6: detected capacity change from 0 to 512 [ 1710.303950][T20180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.338362][ T5963] pwc: send_video_command error -71 [ 1710.353005][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.360251][ T4617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.378371][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.385513][ T4617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1710.394016][ T5963] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1710.446159][T20545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1710.495501][ T982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1710.495553][ T5963] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1710.518909][T20545] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1710.529808][ T982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1710.584765][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1710.668005][ T5963] usb 1-1: USB disconnect, device number 24 [ 1710.870239][T18848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1711.053823][ T5963] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1711.140128][T13826] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1711.262763][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.294610][ T982] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1711.303263][ T5963] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1711.343767][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.389376][ T5963] usb 1-1: config 0 descriptor?? [ 1711.407269][T20180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.428091][ T5963] pwc: Askey VC010 type 2 USB webcam detected. [ 1711.495435][ T982] usb 7-1: Using ep0 maxpacket: 8 [ 1711.525648][ T982] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1711.551253][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.565194][T20180] veth0_vlan: entered promiscuous mode [ 1711.580396][ T982] usb 7-1: Product: syz [ 1711.601107][ T982] usb 7-1: Manufacturer: syz [ 1711.608847][ T982] usb 7-1: SerialNumber: syz [ 1711.635599][T20180] veth1_vlan: entered promiscuous mode [ 1711.681408][ T982] usb 7-1: config 0 descriptor?? [ 1711.850596][ T5963] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1711.851579][ T982] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1711.925575][ T5963] pwc: recv_control_msg error -32 req 02 val 2700 [ 1711.939593][T13442] Bluetooth: hci1: command 0x0406 tx timeout [ 1711.959128][T20180] veth0_macvtap: entered promiscuous mode [ 1711.972964][ T5963] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1711.992409][ T5963] pwc: recv_control_msg error -32 req 04 val 1000 [ 1712.022553][T20180] veth1_macvtap: entered promiscuous mode [ 1712.037873][ T5963] pwc: recv_control_msg error -32 req 04 val 1300 [ 1712.065876][ T5963] pwc: recv_control_msg error -32 req 04 val 1400 [ 1712.094917][T20180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1712.111028][ T5963] pwc: recv_control_msg error -32 req 02 val 2000 [ 1712.141599][ T5963] pwc: recv_control_msg error -32 req 02 val 2100 [ 1712.164676][T20180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.175977][ T5963] pwc: recv_control_msg error -32 req 04 val 1500 [ 1712.191608][ T5963] pwc: recv_control_msg error -32 req 02 val 2500 [ 1712.321733][ T5963] pwc: recv_control_msg error -32 req 02 val 2400 [ 1712.334201][T17604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.264060][ T982] gspca_sonixj: reg_w1 err -110 [ 1713.523912][T17605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.537826][T17605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.547488][T17605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.583835][ T982] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1713.673762][ T5963] pwc: recv_control_msg error -71 req 02 val 2600 [ 1713.706833][T20198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1713.706908][ T5963] pwc: recv_control_msg error -71 req 02 val 2900 [ 1713.734350][ T5963] pwc: recv_control_msg error -71 req 02 val 2800 [ 1713.763991][ T5963] pwc: recv_control_msg error -71 req 04 val 1100 [ 1713.842052][ T5963] pwc: recv_control_msg error -71 req 04 val 1200 [ 1713.914290][ T5963] pwc: Registered as video103. [ 1713.921231][ T5963] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 1714.005509][ T5963] usb 1-1: USB disconnect, device number 25 [ 1714.028547][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.064639][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.206623][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.228485][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.034252][T12661] usb 7-1: USB disconnect, device number 9 [ 1715.697289][ T3497] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1716.065491][T13826] Bluetooth: hci2: Frame reassembly failed (-84) [ 1716.984519][T17604] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1717.917849][T20184] Bluetooth: hci0: command 0x0406 tx timeout [ 1718.054994][T13442] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1719.888945][T13826] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1720.096981][T19719] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1720.254526][ T5949] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1720.483850][ T5949] usb 8-1: Using ep0 maxpacket: 8 [ 1720.673740][ T5949] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1720.682822][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.774008][ T5949] usb 8-1: Product: syz [ 1720.778212][ T5949] usb 8-1: Manufacturer: syz [ 1720.782806][ T5949] usb 8-1: SerialNumber: syz [ 1720.913057][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1720.981220][ T5949] usb 8-1: config 0 descriptor?? [ 1721.064029][ T5949] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1722.542774][T19719] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1723.039465][T19719] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 1723.177964][T20707] sp0: Synchronizing with TNC [ 1723.186244][T19719] usb 1-1: config 0 has no interface number 0 [ 1723.192375][T19719] usb 1-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1723.372265][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1723.385193][T19719] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1723.415608][T19719] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 1723.438799][T19719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.531742][T19719] usb 1-1: Product: syz [ 1723.541559][T19719] usb 1-1: Manufacturer: syz [ 1723.576951][T19719] usb 1-1: SerialNumber: syz [ 1723.595554][ T5949] gspca_sonixj: reg_r err -32 [ 1723.635151][T19719] usb 1-1: config 0 descriptor?? [ 1723.643982][ T5949] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 1723.668742][T20702] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1723.679512][T19719] usb 1-1: Expected 3 endpoints, found: 2 [ 1723.882769][T19719] usb 1-1: USB disconnect, device number 26 [ 1724.283866][ T5949] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1724.463361][ T5949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.497770][ T5949] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1724.556672][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.220944][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1725.259607][ T5949] usb 3-1: config 0 descriptor?? [ 1725.269798][ T5949] pwc: Askey VC010 type 2 USB webcam detected. [ 1725.691815][ T5949] pwc: send_video_command error -71 [ 1725.966202][ T5949] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1726.004560][ T5949] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1726.012583][ T982] usb 8-1: USB disconnect, device number 5 [ 1726.109598][ T5949] usb 3-1: USB disconnect, device number 5 [ 1726.619504][T20198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1726.713818][ T982] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1726.733916][ T5949] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1727.012843][ T5949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.734930][ T982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.799427][ T5949] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1727.808910][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.820719][ T5949] usb 3-1: config 0 descriptor?? [ 1727.893290][ T982] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1727.905547][T20769] netlink: 'syz.9.3698': attribute type 10 has an invalid length. [ 1727.939740][ T5949] usb 3-1: can't set config #0, error -71 [ 1727.952516][ T5949] usb 3-1: USB disconnect, device number 6 [ 1728.018986][ T982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.069702][T20769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1728.092298][ T982] usb 8-1: config 0 descriptor?? [ 1728.145853][T20769] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1728.677683][ T6048] IPVS: starting estimator thread 0... [ 1728.944819][T20779] IPVS: using max 34 ests per chain, 81600 per kthread [ 1729.241396][T13826] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1729.269022][ T982] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 1729.383025][T20749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.413132][ T982] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.000F/input/input29 [ 1729.441237][T20749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.698622][T12347] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1729.826207][T20788] loop6: detected capacity change from 0 to 512 [ 1729.850551][ T982] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1729.955115][ T982] usb 8-1: USB disconnect, device number 6 [ 1729.966264][T20788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1730.340068][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.347226][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.381295][T20788] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1730.393746][ T5949] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1730.643569][T20801] fido_id[20801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1730.695679][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.734228][ T5949] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1730.775558][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.834287][T18848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1730.890828][ T5949] usb 1-1: config 0 descriptor?? [ 1730.962331][ T5949] pwc: Askey VC010 type 2 USB webcam detected. [ 1730.979738][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1731.467409][ T5949] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1731.516344][ T5949] pwc: recv_control_msg error -32 req 02 val 2700 [ 1731.534410][ T5949] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1731.561736][ T5949] pwc: recv_control_msg error -32 req 04 val 1000 [ 1731.640098][ T5949] pwc: recv_control_msg error -32 req 04 val 1300 [ 1731.647864][ T5949] pwc: recv_control_msg error -32 req 04 val 1400 [ 1731.663129][ T5949] pwc: recv_control_msg error -32 req 02 val 2000 [ 1731.699005][T20829] netlink: 'syz.7.3712': attribute type 10 has an invalid length. [ 1731.714923][ T5949] pwc: recv_control_msg error -32 req 02 val 2100 [ 1731.732415][ T5949] pwc: recv_control_msg error -32 req 04 val 1500 [ 1731.797076][ T5949] pwc: recv_control_msg error -32 req 02 val 2500 [ 1731.936190][T20828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.943899][T20828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.010216][ T6048] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1732.023063][ T5949] pwc: recv_control_msg error -71 req 02 val 2600 [ 1732.037516][ T5949] pwc: recv_control_msg error -71 req 02 val 2900 [ 1732.071671][ T5949] pwc: recv_control_msg error -71 req 02 val 2800 [ 1732.098508][ T5949] pwc: recv_control_msg error -71 req 04 val 1100 [ 1732.123547][ T5949] pwc: recv_control_msg error -71 req 04 val 1200 [ 1732.154499][ T5949] pwc: Registered as video103. [ 1732.174324][ T6048] usb 7-1: Using ep0 maxpacket: 32 [ 1732.175281][ T5949] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 1732.254978][T20198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1732.265685][ T6048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.389702][ T5949] usb 1-1: USB disconnect, device number 27 [ 1732.546106][ T6048] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1732.757419][ T6048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.855570][ T6048] usb 7-1: config 0 descriptor?? [ 1732.886130][ T6048] hub 7-1:0.0: USB hub found [ 1733.031454][T20828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1733.206391][ T6048] hub 7-1:0.0: 1 port detected [ 1733.741692][T20828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.847880][T20841] Falling back ldisc for ttyS3. [ 1734.193006][T20829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.230482][T13826] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.473371][ T6046] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.087107][T20863] syz.2.3721 (20863): drop_caches: 2 [ 1735.114697][T17923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1735.245821][ T6046] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.286782][ T6046] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.404030][ T982] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1735.408049][ T5949] usb 7-1: USB disconnect, device number 10 [ 1736.778719][ T6045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1738.669102][ T9222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1739.300009][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1739.321253][T20928] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1739.373869][T12661] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1739.553907][T12661] usb 3-1: Using ep0 maxpacket: 32 [ 1739.571011][T12661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.613038][T12661] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1739.665474][T12661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.677546][T20936] Cannot find add_set index 1 as target [ 1739.795740][T20936] syz.0.3740 (20936): drop_caches: 2 [ 1739.842830][T12661] usb 3-1: config 0 descriptor?? [ 1739.862383][T12661] hub 3-1:0.0: USB hub found [ 1740.060615][T12661] hub 3-1:0.0: 1 port detected [ 1740.677172][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1740.835891][T20950] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3744'. [ 1740.888924][T20950] C: entered allmulticast mode [ 1741.411457][T12661] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1741.531632][T12661] usb 3-1: USB disconnect, device number 7 [ 1741.549776][T20975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1741.973879][ T5949] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1742.313931][ T5949] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.449946][ T5949] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1742.483696][ T5949] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.614209][T20990] syz.2.3754 (20990): drop_caches: 2 [ 1743.052119][T13826] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1743.091597][ T5949] usb 10-1: config 0 descriptor?? [ 1743.103229][ T5949] pwc: Askey VC010 type 2 USB webcam detected. [ 1743.172109][T20992] Cannot find add_set index 1 as target [ 1743.307785][T20992] syz.0.3755 (20992): drop_caches: 2 [ 1743.546645][ T5949] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1743.595092][ T5949] pwc: recv_control_msg error -32 req 02 val 2700 [ 1743.602397][ T5949] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1743.612575][ T5949] pwc: recv_control_msg error -32 req 04 val 1000 [ 1743.622667][ T5949] pwc: recv_control_msg error -32 req 04 val 1300 [ 1743.629751][ T5949] pwc: recv_control_msg error -32 req 04 val 1400 [ 1743.639953][ T5949] pwc: recv_control_msg error -32 req 02 val 2000 [ 1743.669944][ T5949] pwc: recv_control_msg error -32 req 02 val 2100 [ 1743.697867][ T5949] pwc: recv_control_msg error -32 req 04 val 1500 [ 1743.901946][ T5949] pwc: recv_control_msg error -32 req 02 val 2500 [ 1744.140555][ T5949] pwc: recv_control_msg error -71 req 02 val 2600 [ 1744.148827][ T5949] pwc: recv_control_msg error -71 req 02 val 2900 [ 1744.175353][ T5949] pwc: recv_control_msg error -71 req 02 val 2800 [ 1744.190312][ T5949] pwc: recv_control_msg error -71 req 04 val 1100 [ 1744.232093][ T5949] pwc: recv_control_msg error -71 req 04 val 1200 [ 1744.266802][ T5949] pwc: Registered as video103. [ 1744.299067][ T5949] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input31 [ 1744.313955][ T982] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1744.387483][ T5949] usb 10-1: USB disconnect, device number 3 [ 1744.435848][T17923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1744.753729][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 1744.815661][ T982] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1744.829679][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.880700][ T982] usb 3-1: Product: syz [ 1744.895233][ T982] usb 3-1: Manufacturer: syz [ 1744.915976][ T982] usb 3-1: SerialNumber: syz [ 1744.924921][ T982] usb 3-1: config 0 descriptor?? [ 1744.931609][T21011] 9pnet_fd: Insufficient options for proto=fd [ 1744.942750][ T982] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1745.054043][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1745.267724][ T982] gspca_ov534_9: reg_w failed -71 [ 1745.467905][T21018] loop6: detected capacity change from 0 to 4096 [ 1745.601163][T21023] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1745.678187][ T982] gspca_ov534_9: Unknown sensor 0000 [ 1745.678258][ T982] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1745.819907][ T982] usb 3-1: USB disconnect, device number 8 [ 1746.345824][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1748.432075][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1749.673194][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1749.975920][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.014095][ T9] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1750.051798][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.081210][ T9] usb 8-1: config 0 descriptor?? [ 1750.109643][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1750.174541][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1750.823022][ T9222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1750.970994][ T982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1751.025790][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1751.117052][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1751.128285][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1751.353922][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1751.646622][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1751.666020][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1751.694151][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1751.719178][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1751.780133][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1752.140424][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1752.174402][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1752.253826][T21093] netlink: 'syz.6.3776': attribute type 10 has an invalid length. [ 1752.454152][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1752.475370][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1752.576073][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1752.596308][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1752.642878][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1752.698767][ T9] pwc: Registered as video103. [ 1752.730275][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input32 [ 1752.804208][ T9] usb 8-1: USB disconnect, device number 7 [ 1754.151859][ T4617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1754.364188][T21123] netlink: 'syz.0.3783': attribute type 10 has an invalid length. [ 1755.654475][T21141] netlink: 'syz.9.3789': attribute type 10 has an invalid length. [ 1756.176570][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1756.581005][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1757.393693][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1757.854268][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1758.374257][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.389122][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1758.417171][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.468180][ T9] usb 3-1: config 0 descriptor?? [ 1758.515105][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1759.228667][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1759.273897][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1759.318968][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1759.353816][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1759.370639][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1759.381943][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1759.434094][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1759.603877][T21187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1759.611762][T21187] IPv6: NLM_F_CREATE should be set when creating new route [ 1759.772689][T21194] netlink: 'syz.0.3804': attribute type 10 has an invalid length. [ 1760.054129][ T5956] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1760.492118][ T9222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1760.606493][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.654799][ T5956] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1760.674929][ T5956] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.703800][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 1760.738179][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 1760.868344][ T5956] usb 8-1: config 0 descriptor?? [ 1760.913807][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1761.446388][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1761.497301][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1761.698588][ T6045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1761.713836][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1761.801076][ T5956] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 1761.810676][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1761.823443][ T5956] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0010/input/input33 [ 1761.845484][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1761.895973][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1761.921510][ T9] pwc: Registered as video103. [ 1761.980340][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 1761.993286][T21198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.016858][ T6045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1762.022575][T21198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.133791][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1763.313317][T21220] sp0: Synchronizing with TNC [ 1763.621586][ T6045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1763.666071][ T9] usb 3-1: USB disconnect, device number 9 [ 1764.324436][ T5956] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1764.558547][T12347] usb 8-1: USB disconnect, device number 8 [ 1764.616787][T21233] fido_id[21233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1764.878329][T21245] loop7: detected capacity change from 0 to 164 [ 1765.374927][T21248] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1767.109238][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1767.184409][T21248] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1767.191139][T21248] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1767.209172][T21248] vhci_hcd vhci_hcd.0: Device attached [ 1767.455437][T17604] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1767.531846][T21261] vhci_hcd: connection closed [ 1767.533518][T20198] vhci_hcd: stop threads [ 1767.563861][T12347] usb 48-1: SetAddress Request (2) to port 0 [ 1767.580358][T12347] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1767.627582][T20198] vhci_hcd: release socket [ 1768.110498][T20198] vhci_hcd: disconnect device [ 1768.135051][T12347] usb 48-1: enqueue for inactive port 0 [ 1768.468306][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1768.554625][T12347] usb usb48-port1: attempt power cycle [ 1769.449690][T12347] usb usb48-port1: unable to enumerate USB device [ 1770.432811][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1771.050167][T21306] netlink: 'syz.6.3828': attribute type 10 has an invalid length. [ 1771.303791][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1771.699424][ T55] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1772.176665][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.199796][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.257196][ T55] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1772.276717][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.305564][ T5892] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1772.343181][ T55] usb 1-1: config 0 descriptor?? [ 1772.506214][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.536230][ T5956] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1772.545974][ T5892] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1772.568940][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.596223][ T4617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1772.617412][ T5892] usb 3-1: config 0 descriptor?? [ 1772.726045][ T5956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.746025][ T5956] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1772.784212][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.827774][ T55] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1772.852744][ T5956] usb 7-1: config 0 descriptor?? [ 1772.949064][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 1772.958540][ T55] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1773.215287][T17923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1773.553274][ T5956] pwc: send_video_command error -71 [ 1773.559635][ T5956] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1773.567421][ T5956] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1773.638744][T21308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.670451][T21308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.710942][ T5892] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 1773.724901][ T55] cp2112 0003:10C4:EA90.0011: error requesting version [ 1773.741467][ T55] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 1773.756918][ T5956] usb 7-1: USB disconnect, device number 11 [ 1773.797715][ T5892] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0012/input/input35 [ 1773.829886][ T55] usb 1-1: USB disconnect, device number 28 [ 1774.062764][T21324] fido_id[21324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1774.837331][ T5956] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1774.879770][T17923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1775.022358][ T5892] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1775.075293][ T5956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.100151][ T5956] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1775.167477][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.595392][ T5892] usb 3-1: USB disconnect, device number 10 [ 1775.600299][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1775.668512][ T5956] usb 7-1: config 0 descriptor?? [ 1775.694856][ T5956] usb 7-1: can't set config #0, error -71 [ 1775.720735][T21342] fido_id[21342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1775.760662][ T5956] usb 7-1: USB disconnect, device number 12 [ 1775.779471][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1775.827870][T21337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.835455][T21337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.868508][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.931739][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1776.225779][ T9] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1776.578396][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.609204][ T9] usb 8-1: config 0 descriptor?? [ 1777.042679][ T9] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1778.255519][ T9] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1778.335096][T21337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1778.346513][ T9222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1778.833061][ T9] cp2112 0003:10C4:EA90.0013: error requesting version [ 1778.894952][T21337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1778.895297][ T9] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -71 [ 1779.021282][ T9] usb 8-1: USB disconnect, device number 9 [ 1779.173574][T21366] fido_id[21366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1779.849481][T17605] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.876181][T17605] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.020107][ T9222] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.121420][ T9222] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.915332][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1781.650768][ T6048] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1782.039681][ T6048] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.110696][ T6048] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1782.189101][ T6048] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.328337][ T6048] usb 10-1: config 0 descriptor?? [ 1782.368120][ T6048] pwc: Askey VC010 type 2 USB webcam detected. [ 1782.849706][ T6048] pwc: send_video_command error -71 [ 1782.874628][ T6048] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1782.919571][ T6048] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1782.965074][ T6048] usb 10-1: USB disconnect, device number 4 [ 1783.904068][ T6048] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1784.094117][ T6045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1784.215930][ T6048] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.361656][ T6048] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1784.651862][ T6048] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.693291][ T6048] usb 10-1: config 0 descriptor?? [ 1784.728551][ T6048] usb 10-1: can't set config #0, error -71 [ 1784.834474][ T6048] usb 10-1: USB disconnect, device number 5 [ 1785.148400][T21444] kvm: pic: non byte write [ 1787.237797][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1787.953108][T21468] sp0: Synchronizing with TNC [ 1788.618252][T21479] netlink: 'syz.9.3869': attribute type 10 has an invalid length. [ 1789.951309][T20198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.119093][ T5956] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1790.286037][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.333811][ T5956] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1790.409071][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.487429][ T5956] usb 3-1: config 0 descriptor?? [ 1790.535501][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 1790.723446][ T5956] pwc: send_video_command error -71 [ 1790.752696][ T5956] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1790.814086][ T5956] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1790.865988][ T5956] usb 3-1: USB disconnect, device number 11 [ 1791.223802][ T5956] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1791.471706][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.677332][ T5956] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1791.844212][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.855727][ T5956] usb 3-1: config 0 descriptor?? [ 1791.863000][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.874432][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 1791.875982][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.284516][ T5956] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1792.308517][ T5956] pwc: recv_control_msg error -32 req 02 val 2700 [ 1792.356201][ T5956] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1792.421251][ T5956] pwc: recv_control_msg error -32 req 04 val 1000 [ 1792.429286][T17923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1792.454174][ T5956] pwc: recv_control_msg error -32 req 04 val 1300 [ 1792.482855][ T5956] pwc: recv_control_msg error -32 req 04 val 1400 [ 1792.516180][ T5956] pwc: recv_control_msg error -32 req 02 val 2000 [ 1792.539066][ T5956] pwc: recv_control_msg error -32 req 02 val 2100 [ 1792.580210][ T5956] pwc: recv_control_msg error -32 req 04 val 1500 [ 1792.737440][T21527] netlink: 'syz.6.3881': attribute type 10 has an invalid length. [ 1793.662268][ T5956] pwc: recv_control_msg error -32 req 02 val 2500 [ 1794.147536][ T5956] pwc: recv_control_msg error -71 req 02 val 2400 [ 1794.286916][ T5956] pwc: recv_control_msg error -71 req 02 val 2600 [ 1794.298424][ T5956] pwc: recv_control_msg error -71 req 02 val 2900 [ 1794.306393][ T5956] pwc: recv_control_msg error -71 req 02 val 2800 [ 1794.324178][ T5956] pwc: recv_control_msg error -71 req 04 val 1100 [ 1794.413728][ T5956] pwc: recv_control_msg error -71 req 04 val 1200 [ 1794.567135][T21539] sp0: Synchronizing with TNC [ 1794.604181][ T5956] pwc: Registered as video103. [ 1794.612351][ T5956] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 1794.668335][ T5956] usb 3-1: USB disconnect, device number 12 [ 1795.614966][T20198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1796.483240][T21565] sp0: Synchronizing with TNC [ 1797.123846][ T55] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1797.365785][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.397500][ T55] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1797.441675][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.489670][ T55] usb 7-1: config 0 descriptor?? [ 1797.928333][ T55] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 1798.025195][ T55] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0014/input/input37 [ 1798.141678][T21571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.176714][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1798.193933][ T55] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1798.214356][T21571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.411559][T21585] netlink: 'syz.0.3892': attribute type 10 has an invalid length. [ 1799.497719][T21593] loop2: detected capacity change from 0 to 256 [ 1799.509579][ T9] usb 7-1: USB disconnect, device number 13 [ 1800.124967][T21593] FAT-fs (loop2): Directory bread(block 64) failed [ 1800.131502][T21593] FAT-fs (loop2): Directory bread(block 65) failed [ 1800.202839][T21593] FAT-fs (loop2): Directory bread(block 66) failed [ 1800.223120][T21593] FAT-fs (loop2): Directory bread(block 67) failed [ 1800.270155][T21593] FAT-fs (loop2): Directory bread(block 68) failed [ 1800.346832][T21593] FAT-fs (loop2): Directory bread(block 69) failed [ 1800.399547][T21593] FAT-fs (loop2): Directory bread(block 70) failed [ 1800.441643][T21593] FAT-fs (loop2): Directory bread(block 71) failed [ 1800.452431][T21593] FAT-fs (loop2): Directory bread(block 72) failed [ 1800.478621][T21606] netlink: 'syz.0.3897': attribute type 10 has an invalid length. [ 1800.594028][T21593] FAT-fs (loop2): Directory bread(block 73) failed [ 1801.386420][T17923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1803.372089][T21637] sp0: Synchronizing with TNC [ 1803.603794][ T5956] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1803.845875][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.916795][ T5956] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1803.935242][T17923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1804.045256][ T5956] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.464574][ T5956] usb 8-1: config 0 descriptor?? [ 1805.055238][T13442] Bluetooth: hci5: command 0x0406 tx timeout [ 1805.061883][ T5956] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 1805.203866][T21639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.221203][ T5956] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0015/input/input38 [ 1805.233427][T21639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.530783][ T5956] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1805.624443][ T5956] usb 8-1: USB disconnect, device number 10 [ 1805.977840][T21665] fido_id[21665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1806.154810][T21670] loop0: detected capacity change from 0 to 256 [ 1806.339188][T21670] FAT-fs (loop0): Directory bread(block 64) failed [ 1806.396092][T21670] FAT-fs (loop0): Directory bread(block 65) failed [ 1806.453865][T21670] FAT-fs (loop0): Directory bread(block 66) failed [ 1806.460439][T21670] FAT-fs (loop0): Directory bread(block 67) failed [ 1806.543846][T21670] FAT-fs (loop0): Directory bread(block 68) failed [ 1806.550410][T21670] FAT-fs (loop0): Directory bread(block 69) failed [ 1806.703957][T21670] FAT-fs (loop0): Directory bread(block 70) failed [ 1806.710610][T21670] FAT-fs (loop0): Directory bread(block 71) failed [ 1806.801333][T21685] netlink: 'syz.6.3913': attribute type 10 has an invalid length. [ 1806.837926][T21670] FAT-fs (loop0): Directory bread(block 72) failed [ 1806.897725][T21670] FAT-fs (loop0): Directory bread(block 73) failed [ 1807.111492][T21691] netlink: 'syz.7.3917': attribute type 10 has an invalid length. [ 1808.027417][T17604] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1808.273346][T21691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1808.563805][ T5956] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1808.762656][ T5956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.936069][ T5956] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1808.983251][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.983402][T21703] sp0: Synchronizing with TNC [ 1809.049904][ T5956] usb 7-1: config 0 descriptor?? [ 1809.187658][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 1809.419241][ T5956] pwc: send_video_command error -71 [ 1809.429994][ T5956] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1809.571351][ T5956] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1809.694937][ T6045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1809.881492][ T5956] usb 7-1: USB disconnect, device number 14 [ 1810.204874][ T5956] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1810.393377][ T5956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.443502][ T5956] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1810.530422][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.664415][ T5956] usb 7-1: config 0 descriptor?? [ 1810.701434][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 1810.747080][ T4617] bridge_slave_1: left allmulticast mode [ 1810.752775][ T4617] bridge_slave_1: left promiscuous mode [ 1810.827823][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.897390][ T4617] bridge_slave_0: left allmulticast mode [ 1810.903194][ T4617] bridge_slave_0: left promiscuous mode [ 1810.909390][T20184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1810.920607][T20184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1810.932729][T20184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1810.941035][T20184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1810.948762][T20184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1810.974392][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.161914][ T5956] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1811.236401][ T5956] pwc: recv_control_msg error -32 req 02 val 2700 [ 1811.293235][ T5956] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1811.320646][ T5956] pwc: recv_control_msg error -32 req 04 val 1000 [ 1811.350489][ T5956] pwc: recv_control_msg error -32 req 04 val 1300 [ 1811.394305][ T5956] pwc: recv_control_msg error -32 req 04 val 1400 [ 1811.411441][ T5956] pwc: recv_control_msg error -32 req 02 val 2000 [ 1811.443392][ T5956] pwc: recv_control_msg error -32 req 02 val 2100 [ 1811.499353][ T5956] pwc: recv_control_msg error -32 req 04 val 1500 [ 1811.524575][ T5956] pwc: recv_control_msg error -32 req 02 val 2500 [ 1811.554259][ T5956] pwc: recv_control_msg error -32 req 02 val 2400 [ 1811.578351][ T5956] pwc: recv_control_msg error -32 req 02 val 2600 [ 1813.101311][T20184] Bluetooth: hci2: command tx timeout [ 1813.220111][ T5956] pwc: recv_control_msg error -71 req 02 val 2800 [ 1813.485294][ T5956] pwc: recv_control_msg error -71 req 04 val 1100 [ 1813.493786][ T5956] pwc: recv_control_msg error -71 req 04 val 1200 [ 1813.521534][ T5956] pwc: Registered as video103. [ 1813.540711][ T6044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1813.554478][ T5956] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input39 [ 1813.576486][ T5956] usb 7-1: USB disconnect, device number 15 [ 1813.586835][T21736] netlink: 'syz.0.3929': attribute type 10 has an invalid length. [ 1815.030183][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.043536][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.059475][ T4617] bond0 (unregistering): Released all slaves [ 1815.246302][T20184] Bluetooth: hci2: command tx timeout [ 1815.586426][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1816.138713][T21764] sp0: Synchronizing with TNC [ 1816.966847][ T4617] hsr_slave_0: left promiscuous mode [ 1816.986685][ T4617] hsr_slave_1: left promiscuous mode [ 1817.003088][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1817.026082][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1817.293781][T20184] Bluetooth: hci2: command tx timeout [ 1818.073451][T21785] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3940'. [ 1818.092795][T21785] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3940'. [ 1818.106693][T21785] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3940'. [ 1818.127820][T17604] [ 1818.137109][T17604] ============================================ [ 1818.143238][T17604] WARNING: possible recursive locking detected [ 1818.149373][T17604] 6.16.0-rc5-next-20250709-syzkaller #0 Not tainted [ 1818.155942][T17604] -------------------------------------------- [ 1818.162076][T17604] kworker/u8:2/17604 is trying to acquire lock: [ 1818.168379][T17604] ffffe8ffffd33ec0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 1818.177574][T17604] [ 1818.177574][T17604] but task is already holding lock: [ 1818.184918][T17604] ffffe8ffffc33f10 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 1818.194192][T17604] [ 1818.194192][T17604] other info that might help us debug this: [ 1818.202230][T17604] Possible unsafe locking scenario: [ 1818.202230][T17604] [ 1818.209655][T17604] CPU0 [ 1818.212912][T17604] ---- [ 1818.216168][T17604] lock(&pd_list->lock); [ 1818.220474][T17604] lock(&pd_list->lock); [ 1818.224864][T17604] [ 1818.224864][T17604] *** DEADLOCK *** [ 1818.224864][T17604] [ 1818.232984][T17604] May be due to missing lock nesting notation [ 1818.232984][T17604] [ 1818.241277][T17604] 3 locks held by kworker/u8:2/17604: [ 1818.246620][T17604] #0: ffff88801cb3f148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1818.258513][T17604] #1: ffffc900034d7bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1818.270324][T17604] #2: ffffe8ffffc33f10 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 1818.279966][T17604] [ 1818.279966][T17604] stack backtrace: [ 1818.285835][T17604] CPU: 1 UID: 0 PID: 17604 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 PREEMPT(full) [ 1818.285847][T17604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1818.285855][T17604] Workqueue: pencrypt_parallel padata_parallel_worker [ 1818.285869][T17604] Call Trace: [ 1818.285875][T17604] [ 1818.285881][T17604] dump_stack_lvl+0x189/0x250 [ 1818.285894][T17604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1818.285905][T17604] ? __pfx__printk+0x10/0x10 [ 1818.285918][T17604] ? print_lock_name+0xde/0x100 [ 1818.285930][T17604] print_deadlock_bug+0x28b/0x2a0 [ 1818.285941][T17604] validate_chain+0x1a3f/0x2140 [ 1818.285952][T17604] ? irqentry_exit+0x74/0x90 [ 1818.285966][T17604] ? lockdep_hardirqs_on+0x9c/0x150 [ 1818.285978][T17604] ? look_up_lock_class+0x74/0x170 [ 1818.285992][T17604] ? register_lock_class+0x51/0x320 [ 1818.286006][T17604] __lock_acquire+0xab9/0xd20 [ 1818.286021][T17604] ? padata_do_serial+0x73e/0xb80 [ 1818.286030][T17604] lock_acquire+0x120/0x360 [ 1818.286049][T17604] ? padata_do_serial+0x73e/0xb80 [ 1818.286059][T17604] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1818.286072][T17604] _raw_spin_lock+0x2e/0x40 [ 1818.286084][T17604] ? padata_do_serial+0x73e/0xb80 [ 1818.286093][T17604] padata_do_serial+0x73e/0xb80 [ 1818.286106][T17604] ? padata_parallel_worker+0x44/0x1d0 [ 1818.286116][T17604] padata_parallel_worker+0x72/0x1d0 [ 1818.286126][T17604] ? process_scheduled_works+0x9ef/0x17b0 [ 1818.286135][T17604] process_scheduled_works+0xae1/0x17b0 [ 1818.286149][T17604] ? __pfx_process_scheduled_works+0x10/0x10 [ 1818.286161][T17604] worker_thread+0x8a0/0xda0 [ 1818.286175][T17604] kthread+0x70e/0x8a0 [ 1818.286187][T17604] ? __pfx_worker_thread+0x10/0x10 [ 1818.286196][T17604] ? __pfx_kthread+0x10/0x10 [ 1818.286207][T17604] ? _raw_spin_unlock_irq+0x23/0x50 [ 1818.286218][T17604] ? lockdep_hardirqs_on+0x9c/0x150 [ 1818.286230][T17604] ? __pfx_kthread+0x10/0x10 [ 1818.286241][T17604] ret_from_fork+0x3fc/0x770 [ 1818.286250][T17604] ? __pfx_ret_from_fork+0x10/0x10 [ 1818.286259][T17604] ? __switch_to_asm+0x39/0x70 [ 1818.286270][T17604] ? __switch_to_asm+0x33/0x70 [ 1818.286280][T17604] ? __pfx_kthread+0x10/0x10 [ 1818.286290][T17604] ret_from_fork_asm+0x1a/0x30 [ 1818.286305][T17604] [ 1818.501657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1818.512492][T21785] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3940'. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1819.319647][T17923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1819.383401][T20184] Bluetooth: hci2: command tx timeout [ 1819.446153][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 1819.500614][ T4617] team0 (unregistering): Port device team_slave_0 removed [ 1820.617766][ T4617] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.680083][ T4617] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.730938][ T4617] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.771234][ T4617] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.235204][T17605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1821.519371][ T4617] bridge_slave_1: left allmulticast mode [ 1821.526500][ T4617] bridge_slave_1: left promiscuous mode [ 1821.532233][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.543505][ T4617] bridge_slave_0: left allmulticast mode [ 1821.549463][ T4617] bridge_slave_0: left promiscuous mode [ 1821.558050][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.568314][ T4617] bridge_slave_1: left allmulticast mode [ 1821.575751][ T4617] bridge_slave_1: left promiscuous mode [ 1821.583001][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.591645][ T4617] bridge_slave_0: left allmulticast mode [ 1821.599509][ T4617] bridge_slave_0: left promiscuous mode [ 1821.608186][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.622152][ T4617] bridge_slave_1: left allmulticast mode [ 1821.627900][ T4617] bridge_slave_1: left promiscuous mode [ 1821.633642][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.644190][ T4617] bridge_slave_0: left allmulticast mode [ 1821.651380][ T4617] bridge_slave_0: left promiscuous mode [ 1821.660206][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.789643][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1821.800060][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1821.810020][ T4617] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1821.819623][ T4617] bond0 (unregistering): Released all slaves [ 1822.255265][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1822.266060][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1822.277698][ T4617] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1822.286819][ T4617] bond0 (unregistering): Released all slaves [ 1822.722929][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1822.732280][ T4617] bond_slave_0: left promiscuous mode [ 1822.739351][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1822.748259][ T4617] bond_slave_1: left promiscuous mode [ 1822.756071][ T4617] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1822.764549][ T4617] batadv0: left promiscuous mode [ 1822.769865][ T4617] bond0 (unregistering): Released all slaves [ 1822.867152][ T4617] tipc: Disabling bearer [ 1822.872809][ T4617] tipc: Left network mode [ 1822.896021][ T4617] IPVS: stopping master sync thread 19692 ... [ 1822.909033][ T4617] IPVS: stopping master sync thread 19570 ... [ 1823.314869][ T4617] hsr_slave_0: left promiscuous mode [ 1823.320734][ T4617] hsr_slave_1: left promiscuous mode [ 1823.328499][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1823.336477][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.348214][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1823.356992][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.367750][ T4617] hsr_slave_0: left promiscuous mode [ 1823.375412][ T4617] hsr_slave_1: left promiscuous mode [ 1823.381657][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.392078][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.408908][ T4617] hsr_slave_0: left promiscuous mode [ 1823.416540][ T4617] hsr_slave_1: left promiscuous mode [ 1823.422365][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.430413][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.441216][ T4617] veth1_macvtap: left promiscuous mode [ 1823.447338][ T4617] veth0_macvtap: left promiscuous mode [ 1823.452935][ T4617] veth1_vlan: left promiscuous mode [ 1823.460883][ T4617] veth0_vlan: left promiscuous mode [ 1823.641998][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 1823.677048][ T4617] team0 (unregistering): Port device C removed [ 1824.200212][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 1824.251788][ T4617] team0 (unregistering): Port device team_slave_0 removed [ 1825.054388][T17923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1825.163969][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 1825.217432][ T4617] team0 (unregistering): Port device C removed [ 1826.389126][ T4617] IPVS: stop unused estimator thread 0... [ 1826.406383][ T4617] IPVS: stop unused estimator thread 0... [ 1826.974168][ T6045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration