last executing test programs: 2m58.917670668s ago: executing program 3 (id=26): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x20146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5882, 0x400, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) 2m58.41667069s ago: executing program 3 (id=32): mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r2, &(0x7f00000001c0)='n', 0x1) 2m55.805145108s ago: executing program 3 (id=36): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f000000a440), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f000000a480)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, 0x0, 0x0) 2m55.187023302s ago: executing program 3 (id=38): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x7ff, 0x15) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000d00)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x3, 0x0, 0x1, 0x3}}, {&(0x7f0000000bc0)=""/215, 0xd7}, 0x0, 0x30}, 0xa0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x1) syz_emit_ethernet(0x62, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@remote}]}]}}}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="08000000091703000101d4d63b1b04000001ff0000002a3d6fcee7c39b42058102400000cee8ea1200000000005fc841900037b6c507fcba1d6fb6afd1d9cee6162e79305c7d", 0x46) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 2m54.192386504s ago: executing program 3 (id=41): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/file0\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000200)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000192c0)={0x1, &(0x7f0000019280)=[{0x2, 0x34, 0x8, 0x6}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000019a40), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000019a80), 0xc0802, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019ac0)='net/raw6\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) write(r5, &(0x7f0000019b80)="4c00000011000e14001b000200001e000200", 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000019200)='./sys\x00', 0x1ae) mount(0x0, &(0x7f0000019c00)='./sys\x00', &(0x7f0000019c40)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000019d00)='./sys/devices/system/cpu/cpu1/firmware_node/eject\x00', 0x1, 0x0) write(r6, &(0x7f0000019d40)='1', 0x1) 2m52.405875918s ago: executing program 3 (id=43): socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000a80)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_PTRACER(0x59616d61, r1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019a80), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000019ac0)={{}, {0x20, 0xfc}, 0x0, 0x4}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sendfile(r5, r5, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, 0x0, r8, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) 2m36.308092264s ago: executing program 32 (id=43): socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000a80)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_PTRACER(0x59616d61, r1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019a80), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000019ac0)={{}, {0x20, 0xfc}, 0x0, 0x4}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sendfile(r5, r5, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, 0x0, r8, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) 2m6.214884979s ago: executing program 1 (id=88): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000a80)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_PTRACER(0x59616d61, r1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019a80), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000019ac0)={{}, {0x20, 0xfc}, 0x0, 0x4}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100), 0x0, &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x20146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x80400, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x622a, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) 2m4.670891167s ago: executing program 1 (id=89): setns(0xc9, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4096, 0x20001b80}, {&(0x7f0000001980)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001ac0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x880, 0x0) fcntl$getown(r0, 0x9) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) r4 = open(&(0x7f00000003c0)='./file1\x00', 0x4827e, 0x20) mkdirat(r1, &(0x7f0000000000)='./file0/file2\x00', 0x22) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c00001f000601020000000000000000000000080c000a8008000140000000010900060073797a3100000000"], 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x38, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 2m3.586038459s ago: executing program 1 (id=90): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x141103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000400), 0x77, 0x111b01) r1 = syz_open_dev$usbfs(0x0, 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000480)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) symlink(0x0, 0x0) 2m0.931266052s ago: executing program 1 (id=91): socket$netlink(0x10, 0x3, 0xe) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0xf7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$video(0x0, 0x7, 0x40) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) mq_open(0x0, 0x40, 0x60, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000500), 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 1m59.070515234s ago: executing program 1 (id=95): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/file0\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000200)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000192c0)={0x1, &(0x7f0000019280)=[{0x2, 0x34, 0x8, 0x6}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000019a40), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000019a80), 0xc0802, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019ac0)='net/raw6\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000019b40)={0x1f, 0xffff, 0x3}, 0x6) write(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019200)='./sys\x00', 0x1ae) mount(0x0, &(0x7f0000019c00)='./sys\x00', &(0x7f0000019c40)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000019d00)='./sys/devices/system/cpu/cpu1/firmware_node/eject\x00', 0x1, 0x0) write(r6, &(0x7f0000019d40)='1', 0x1) 1m57.403604805s ago: executing program 1 (id=97): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x141103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000400), 0x77, 0x111b01) r1 = syz_open_dev$usbfs(&(0x7f0000000440), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) symlink(0x0, 0x0) 1m42.124209266s ago: executing program 33 (id=97): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x141103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000400), 0x77, 0x111b01) r1 = syz_open_dev$usbfs(&(0x7f0000000440), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) symlink(0x0, 0x0) 27.272491925s ago: executing program 0 (id=199): r0 = socket$inet6(0xa, 0x3, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000028c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000002900)=0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) timer_settime(r2, 0x1, &(0x7f0000003980)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23.702016822s ago: executing program 0 (id=203): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000000)={0xffffffff, 0xfffffffc, 0x7, 0xfb, 0x1}) 19.645012259s ago: executing program 0 (id=210): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000a80)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_PTRACER(0x59616d61, r1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019a80), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000019ac0)={{}, {0x20, 0xfc}, 0x0, 0x4}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100), 0x0, &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x20146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x80400, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x622a, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) 17.783159911s ago: executing program 4 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) 17.570023593s ago: executing program 0 (id=212): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x15, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000039b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8dd00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000d00)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=@filename='mtd0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='jffs2\x00', 0x800000, 0x0) chdir(0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0xfffffee2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x86c0, 0x101) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x5000003a, r2, 0x0) symlinkat(&(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000740)='.\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00') 17.49711388s ago: executing program 4 (id=213): syz_usb_connect$uac1(0x5, 0x88, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0x9, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x5}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x4, 0x9, 0x1, "00000000001683"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}}}}}]}}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000600)='F', 0x1) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000280)={0x1, r3, 0x0, {0xfffffffffffffff8, 0x100000004}}, 0x1) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000800)={0x2, 0x4455, 0x5, 0x84800}) io_setup(0x3, &(0x7f00000002c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/wakeup_count', 0x1a1081, 0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x7, 0xffff, r2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2}]) 13.278993654s ago: executing program 4 (id=217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000000c80)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000019c80)=ANY=[], 0x2a, 0x0) add_key(&(0x7f0000019cc0)='encrypted\x00', &(0x7f0000019d00), &(0x7f0000019d40), 0xca, 0xfffffffffffffffe) r5 = getpgid(r2) fcntl$setownex(r4, 0xf, &(0x7f0000019d80)={0x1, r5}) add_key$user(0x0, &(0x7f0000019dc0)={'syz', 0x0}, &(0x7f0000019e00), 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000019e40)='./cgroup/../file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000019f40)={0x800000, 0x80, 0x8000007, 0x12000000, 0x400, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20008804) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000240)={0x0, 0x10000, 0x6a2f, 0x40000a6, 0x3, '\x00', 0x10, 0x200008}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000280)) 11.994432266s ago: executing program 4 (id=218): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) 10.151124266s ago: executing program 2 (id=222): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 9.471295746s ago: executing program 0 (id=223): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/4\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000c80)=0x10000000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000d40)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000d80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000dc0), 0x0, 0x0) read$msr(r5, &(0x7f0000000e00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000019e00), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r6, 0x100000000) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000140)=ANY=[], 0x6) 9.465451086s ago: executing program 2 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x10000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000007, 0x2000002, 0x401c031, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 7.909100706s ago: executing program 0 (id=225): setns(0xc9, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1451c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4096, 0x20001b80}, {&(0x7f0000001980)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001ac0), 0x0, 0x0) read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x880, 0x0) fcntl$getown(r0, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r5 = open(0x0, 0x4827e, 0x20) mkdirat(r1, 0x0, 0x22) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}]}) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c00001f000601020000000000000000000000080c000a8008000140000000010900060073797a31000000"], 0x2c}}, 0x0) 7.389148589s ago: executing program 4 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000000c80)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000019c80)=ANY=[], 0x2a, 0x0) add_key(&(0x7f0000019cc0)='encrypted\x00', &(0x7f0000019d00), &(0x7f0000019d40), 0xca, 0xfffffffffffffffe) r5 = getpgid(r2) fcntl$setownex(r4, 0xf, &(0x7f0000019d80)={0x1, r5}) add_key$user(0x0, &(0x7f0000019dc0)={'syz', 0x0}, &(0x7f0000019e00), 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000019e40)='./cgroup/../file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000019f40)={0x800000, 0x80, 0x8000007, 0x12000000, 0x400, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20008804) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000240)={0x0, 0x10000, 0x6a2f, 0x40000a6, 0x3, '\x00', 0x10, 0x200008}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000280)) 6.058937957s ago: executing program 4 (id=227): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="200139"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000240), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x1, 0x83, 0x0, 0x0}) 5.313863403s ago: executing program 2 (id=229): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) iopl(0x3) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000000c0)=""/195, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x8031, r1, 0x8cedd000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 4.637783633s ago: executing program 5 (id=230): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x4000000000]}, 0x8, 0x0) faccessat2(r0, &(0x7f0000000400)='\x00', 0x2, 0x1200) unshare(0x8040480) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @void}, 0x10) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) listen(r1, 0x8000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/mapper/control\x00', 0x2, 0x44) ioctl(r2, 0xc138fd03, &(0x7f0000000700)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e36") 3.861556052s ago: executing program 5 (id=231): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x15, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000039b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8dd00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000d00)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=@filename='mtd0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000480)='./file0\x00') clock_nanosleep(0x2, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0xfffffee2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x86c0, 0x101) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x5000003a, r2, 0x0) symlinkat(&(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000740)='.\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00') 3.830742426s ago: executing program 2 (id=232): capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) r0 = openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x0) ftruncate(r0, 0x8800000) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') open(&(0x7f00000003c0)='./file1\x00', 0x4827e, 0x20) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) 3.567256173s ago: executing program 2 (id=233): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/4\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000c80)=0x10000000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000d40)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000d80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000dc0), 0x0, 0x0) read$msr(r5, &(0x7f0000000e00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000019e00), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r6, 0x100000000) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000140)=ANY=[], 0x6) 3.446607395s ago: executing program 5 (id=234): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x141102) writev(r2, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) 2.187752515s ago: executing program 2 (id=235): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000f8dc3b219a1499fc377154e5e727d065d91869daddff81003900000d010000c036030000166311dc5046077b049f230f7b932bd9e252e4567ff0bcce236e6978587d09940316df2aadeff2549c6d093c920b70d903b49226d993b8b1"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x402) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000740)='net/rpc\x00') openat(r5, &(0x7f0000000780)='auth.unix.ip/channel\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x10001, @mcast1}, 0x1c, 0x0}}], 0x1, 0x20002040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24008801}, 0x24040008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e23, 0xe84, @mcast1, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 2.010348973s ago: executing program 5 (id=236): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x20146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5882, 0x400, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 311.604828ms ago: executing program 5 (id=237): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000001, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000002700)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002800)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000002840)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002940)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}}, 0x0) 0s ago: executing program 5 (id=238): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f00000006c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000196c0)=0x80000000000003) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000019800)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019840), 0x88b02, 0x0) socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000019880)={0x3, 0x40}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={&(0x7f0000019940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)={0x118, 0x32, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x8, 0xe9, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 58.732174][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.742484][ T5446] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. syzkaller login: [ 84.143235][ T5774] cgroup: Unknown subsys name 'net' [ 84.308191][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.003347][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.956659][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.964966][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.974635][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.978018][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.983981][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.993096][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.999210][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.004935][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.013729][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.022028][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.026352][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.039128][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.047343][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.055203][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.062746][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.072443][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.080099][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.092523][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.133464][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.142265][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.156498][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.173572][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.185600][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.194578][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.249316][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 88.255915][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.263152][ T5788] (null): rxe_set_mtu: Set mtu to 1024 [ 88.271870][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.285449][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.295666][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 88.303765][ T5798] (null): rxe_set_mtu: Set mtu to 1024 [ 88.310936][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.316805][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.325499][ T5798] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.599072][ T5787] infiniband rxe0: set active [ 88.606876][ T5787] infiniband rxe0: added rxe_eth0 [ 88.625185][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.680781][ T5787] RDS/IB: rxe0: added [ 88.685364][ T5787] smc: adding ib device rxe0 with port count 1 [ 88.692188][ T5787] smc: ib device rxe0 port 1 has pnetid [ 88.719425][ T1200] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.756221][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.926387][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 88.967002][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 88.980747][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 89.141650][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.409974][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.416779][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.442818][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.463495][ T5798] bridge_slave_0: entered allmulticast mode [ 89.480678][ T5798] bridge_slave_0: entered promiscuous mode [ 89.495579][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.513076][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.525657][ T5788] bridge_slave_0: entered allmulticast mode [ 89.534716][ T5788] bridge_slave_0: entered promiscuous mode [ 89.547127][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.556106][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.567050][ T5786] bridge_slave_0: entered allmulticast mode [ 89.575025][ T5786] bridge_slave_0: entered promiscuous mode [ 89.589360][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.596704][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.609295][ T5798] bridge_slave_1: entered allmulticast mode [ 89.620580][ T5798] bridge_slave_1: entered promiscuous mode [ 89.629462][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.636650][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.648494][ T5788] bridge_slave_1: entered allmulticast mode [ 89.656605][ T5788] bridge_slave_1: entered promiscuous mode [ 89.684595][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.692192][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.703291][ T5786] bridge_slave_1: entered allmulticast mode [ 89.711221][ T5786] bridge_slave_1: entered promiscuous mode [ 89.785493][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.802491][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.843270][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.856760][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.872992][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.936047][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.970648][ T5798] team0: Port device team_slave_0 added [ 89.986833][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.008872][ T5788] team0: Port device team_slave_0 added [ 90.028493][ T5788] team0: Port device team_slave_1 added [ 90.040995][ T5798] team0: Port device team_slave_1 added [ 90.096206][ T5786] team0: Port device team_slave_0 added [ 90.139857][ T5792] Bluetooth: hci1: command tx timeout [ 90.145623][ T5792] Bluetooth: hci0: command tx timeout [ 90.149634][ T5786] team0: Port device team_slave_1 added [ 90.153490][ T5795] Bluetooth: hci2: command tx timeout [ 90.201294][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.222673][ T5792] Bluetooth: hci3: command tx timeout [ 90.229970][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.281904][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.311328][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.323647][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.352454][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.377274][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.386346][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.412883][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.445210][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.452342][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.482745][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.507919][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.515688][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.545995][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.636036][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.643401][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.673841][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.747190][ T5788] hsr_slave_0: entered promiscuous mode [ 90.755487][ T5788] hsr_slave_1: entered promiscuous mode [ 90.772092][ T5798] hsr_slave_0: entered promiscuous mode [ 90.781620][ T5798] hsr_slave_1: entered promiscuous mode [ 90.793353][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.801330][ T5798] Cannot create hsr debugfs directory [ 90.894234][ T5786] hsr_slave_0: entered promiscuous mode [ 90.902531][ T5786] hsr_slave_1: entered promiscuous mode [ 90.909606][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.917220][ T5786] Cannot create hsr debugfs directory [ 91.010928][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.018221][ T5446] infiniband rxe0: set active [ 91.065158][ T1200] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.416441][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 91.520510][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.542257][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.552477][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.586737][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.610453][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.618834][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.626108][ T5787] bridge_slave_0: entered allmulticast mode [ 91.634558][ T5787] bridge_slave_0: entered promiscuous mode [ 91.643699][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.651127][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.658423][ T5787] bridge_slave_1: entered allmulticast mode [ 91.666387][ T5787] bridge_slave_1: entered promiscuous mode [ 91.709492][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.735891][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.783165][ T5787] team0: Port device team_slave_0 added [ 91.796075][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.814723][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.826733][ T5787] team0: Port device team_slave_1 added [ 91.851349][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.864397][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.889312][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.896284][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.923146][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.969963][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.976949][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.000951][ T971] cfg80211: failed to load regulatory.db [ 92.010415][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.075887][ T5787] hsr_slave_0: entered promiscuous mode [ 92.083095][ T5787] hsr_slave_1: entered promiscuous mode [ 92.090127][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.097746][ T5787] Cannot create hsr debugfs directory [ 92.155363][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.171967][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.205532][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.218705][ T5792] Bluetooth: hci2: command tx timeout [ 92.224347][ T5792] Bluetooth: hci0: command tx timeout [ 92.231139][ T5795] Bluetooth: hci1: command tx timeout [ 92.258521][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.299299][ T5795] Bluetooth: hci3: command tx timeout [ 92.485925][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.546646][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.558300][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.594427][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.601908][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.646029][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.661531][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.668776][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.686352][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.696958][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.712941][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.729608][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.740417][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.783149][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.790375][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.809144][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.844009][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.851235][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.861679][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.868901][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.895207][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.902406][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.222549][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.310039][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.337868][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.345122][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.374280][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.381500][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.453772][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.634446][ T5798] veth0_vlan: entered promiscuous mode [ 93.670542][ T5798] veth1_vlan: entered promiscuous mode [ 93.714870][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.759807][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.810692][ T5798] veth0_macvtap: entered promiscuous mode [ 93.832587][ T5798] veth1_macvtap: entered promiscuous mode [ 93.896678][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.933072][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.957241][ T5786] veth0_vlan: entered promiscuous mode [ 93.993922][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004146][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.014547][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.023394][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.037928][ T5788] veth0_vlan: entered promiscuous mode [ 94.045194][ T5786] veth1_vlan: entered promiscuous mode [ 94.071680][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.097796][ T5788] veth1_vlan: entered promiscuous mode [ 94.225545][ T5788] veth0_macvtap: entered promiscuous mode [ 94.247304][ T5787] veth0_vlan: entered promiscuous mode [ 94.264338][ T5786] veth0_macvtap: entered promiscuous mode [ 94.298881][ T5795] Bluetooth: hci2: command tx timeout [ 94.305088][ T5788] veth1_macvtap: entered promiscuous mode [ 94.312060][ T5795] Bluetooth: hci1: command tx timeout [ 94.317598][ T5795] Bluetooth: hci0: command tx timeout [ 94.323916][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.343148][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.356798][ T5787] veth1_vlan: entered promiscuous mode [ 94.378066][ T5786] veth1_macvtap: entered promiscuous mode [ 94.388464][ T5795] Bluetooth: hci3: command tx timeout [ 94.424551][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.435557][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.447866][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.461520][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.475735][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.478970][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.497181][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.509930][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.536119][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.545203][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.554764][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.564021][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.586043][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.596580][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.606906][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.620538][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.633210][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.687279][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.700391][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.711497][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.722019][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.735389][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.755716][ T5787] veth0_macvtap: entered promiscuous mode [ 94.766014][ T5798] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.798390][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.809462][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.818225][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.827571][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.861475][ T5787] veth1_macvtap: entered promiscuous mode [ 94.966583][ T5889] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.007678][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.028488][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.043724][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.054595][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.067788][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.080327][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.097230][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.161585][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.172670][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.183311][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.194692][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.205158][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.215979][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.227585][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.236978][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.251558][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.291799][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.318915][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.340316][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.349744][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.357795][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.365571][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.376482][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.385309][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.493134][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.531534][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.715132][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.733545][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.862480][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.880877][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.379899][ T5792] Bluetooth: hci1: command tx timeout [ 96.379924][ T5097] Bluetooth: hci2: command tx timeout [ 96.385398][ T5795] Bluetooth: hci0: command tx timeout [ 96.463109][ T5795] Bluetooth: hci3: command tx timeout [ 96.905030][ T5927] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 96.917116][ T5927] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 96.926259][ T5927] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 96.942122][ T5927] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 96.964113][ T5927] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 96.997675][ T5927] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 97.021707][ T5927] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 97.042569][ T5927] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 97.066429][ T5927] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 97.106197][ T5927] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 97.393172][ T5941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=657332 (1314664 ns) > initial count (658432 ns). Using initial count to start timer. [ 97.859539][ T5961] FAULT_INJECTION: forcing a failure. [ 97.859539][ T5961] name failslab, interval 1, probability 0, space 0, times 1 [ 97.892193][ T5961] CPU: 0 PID: 5961 Comm: syz.1.21 Not tainted syzkaller #0 [ 97.899482][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.909637][ T5961] Call Trace: [ 97.912965][ T5961] [ 97.915940][ T5961] dump_stack_lvl+0x18c/0x250 [ 97.920687][ T5961] ? show_regs_print_info+0x20/0x20 [ 97.925946][ T5961] ? load_image+0x420/0x420 [ 97.930507][ T5961] ? __might_sleep+0xe0/0xe0 [ 97.935146][ T5961] ? __lock_acquire+0x7eb0/0x7eb0 [ 97.940207][ T5961] should_fail_ex+0x394/0x4c0 [ 97.945007][ T5961] should_failslab+0x9/0x20 [ 97.949533][ T5961] slab_pre_alloc_hook+0x59/0x300 [ 97.954589][ T5961] ? __v4l2_subdev_state_alloc+0x5a/0x360 [ 97.960365][ T5961] __kmem_cache_alloc_node+0x53/0x260 [ 97.965768][ T5961] ? __v4l2_subdev_state_alloc+0x5a/0x360 [ 97.971532][ T5961] kmalloc_trace+0x2a/0xe0 [ 97.975994][ T5961] __v4l2_subdev_state_alloc+0x5a/0x360 [ 97.981585][ T5961] subdev_open+0xad/0x430 [ 97.985990][ T5961] v4l2_open+0x208/0x340 [ 97.990273][ T5961] chrdev_open+0x58c/0x600 [ 97.994736][ T5961] ? cd_forget+0x160/0x160 [ 97.999193][ T5961] ? fsnotify_perm+0x3ed/0x5e0 [ 98.003994][ T5961] do_dentry_open+0x880/0x14b0 [ 98.008796][ T5961] ? cd_forget+0x160/0x160 [ 98.013245][ T5961] path_openat+0x284f/0x3270 [ 98.017904][ T5961] ? do_sys_openat2+0xda/0x1d0 [ 98.022754][ T5961] ? __x64_sys_openat+0x139/0x160 [ 98.027832][ T5961] ? verify_lock_unused+0x140/0x140 [ 98.033152][ T5961] ? do_filp_open+0x430/0x430 [ 98.037876][ T5961] do_filp_open+0x1f2/0x430 [ 98.042424][ T5961] ? vfs_tmpfile+0x620/0x620 [ 98.047064][ T5961] ? _raw_spin_unlock+0x28/0x40 [ 98.051951][ T5961] ? alloc_fd+0x590/0x640 [ 98.056419][ T5961] do_sys_openat2+0x134/0x1d0 [ 98.061149][ T5961] ? do_sys_open+0xe0/0xe0 [ 98.065607][ T5961] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 98.071628][ T5961] ? lock_chain_count+0x20/0x20 [ 98.076508][ T5961] ? lock_chain_count+0x20/0x20 [ 98.081390][ T5961] __x64_sys_openat+0x139/0x160 [ 98.086392][ T5961] do_syscall_64+0x55/0xb0 [ 98.090843][ T5961] ? clear_bhb_loop+0x40/0x90 [ 98.095578][ T5961] ? clear_bhb_loop+0x40/0x90 [ 98.100295][ T5961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.106240][ T5961] RIP: 0033:0x7f3242f5fd8e [ 98.110690][ T5961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.130351][ T5961] RSP: 002b:00007f3243ddbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.138803][ T5961] RAX: ffffffffffffffda RBX: 00007f3243ddc6c0 RCX: 00007f3242f5fd8e [ 98.146810][ T5961] RDX: 0000000000080002 RSI: 00007f3243ddbc00 RDI: ffffffffffffff9c [ 98.154813][ T5961] RBP: 00007f3243ddbc00 R08: 0000000000000000 R09: 0000000000000000 [ 98.162816][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 98.170819][ T5961] R13: 00007f3243226038 R14: 00007f3243225fa0 R15: 00007ffc07c186d8 [ 98.178840][ T5961] [ 98.519507][ T5968] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 98.552854][ T5968] syz.0.23[5968]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.668630][ T5991] Zero length message leads to an empty skb [ 101.008572][ C0] sched: RT throttling activated [ 101.148689][ T5886] smpboot: CPU 1 is now offline [ 101.164637][ T5994] jffs2: notice: (5994) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.804567][ T3463] ACPI: \_SB_.C001: Eject incomplete - status 0xf [ 103.030833][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.289064][ T6039] process 'syz.1.44' launched '/dev/fd/5' with NULL argv: empty string added [ 105.830737][ T6048] Illegal XDP return value 36 on prog (id 4) dev N/A, expect packet loss! [ 105.875845][ T6051] No source specified [ 108.418154][ T6057] jffs2: notice: (6057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.144672][ T6074] trusted_key: encrypted_key: insufficient parameters specified [ 112.241461][ T9] IPVS: starting estimator thread 0... [ 112.279239][ T6088] netlink: 'syz.0.55': attribute type 24 has an invalid length. [ 112.287165][ T6088] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 112.296345][ T6088] netlink: 228 bytes leftover after parsing attributes in process `syz.0.55'. [ 112.368754][ T6091] IPVS: using max 26 ests per chain, 62400 per kthread [ 113.348736][ T6094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.51'. [ 115.350512][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54'. [ 115.363767][ T6097] syz.2.54 (6097) used greatest stack depth: 20744 bytes left [ 116.661019][ T6101] jffs2: notice: (6101) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.400606][ T6109] No source specified [ 121.759718][ T6123] jffs2: notice: (6123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.797039][ T6123] overlay: ./file0 is not a directory [ 123.201942][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.64'. [ 123.492829][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.501587][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.509589][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.517254][ T5097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.525430][ T5097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.532894][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.671809][ T6132] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.894412][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.66'. [ 125.584785][ T5097] Bluetooth: hci4: command tx timeout [ 125.911400][ T6132] chnl_net:caif_netlink_parms(): no params data found [ 126.213382][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.254829][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.299752][ T6132] bridge_slave_0: entered allmulticast mode [ 126.321467][ T6132] bridge_slave_0: entered promiscuous mode [ 126.354191][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.418833][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.427512][ T6132] bridge_slave_1: entered allmulticast mode [ 126.488693][ T6132] bridge_slave_1: entered promiscuous mode [ 126.603521][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.680312][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.658625][ T5097] Bluetooth: hci4: command tx timeout [ 129.154227][ T6132] team0: Port device team_slave_0 added [ 129.191468][ T6132] team0: Port device team_slave_1 added [ 130.476281][ T6160] trusted_key: encrypted_key: insufficient parameters specified [ 130.562435][ T5097] Bluetooth: hci4: command tx timeout [ 130.690235][ T6164] No source specified [ 130.801786][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.835879][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.940877][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.987090][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.010416][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.125465][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.315123][ T1093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.592935][ T6132] hsr_slave_0: entered promiscuous mode [ 131.689957][ T6132] hsr_slave_1: entered promiscuous mode [ 132.758910][ T5795] Bluetooth: hci4: command tx timeout [ 132.829366][ T6168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.67'. [ 132.969139][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977612][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.984384][ T6132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.021530][ T6132] Cannot create hsr debugfs directory [ 134.402633][ T1093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.861313][ T1093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.174332][ T1093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.745194][ T6132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.816021][ T6132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.870069][ T6132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.922447][ T6132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.139031][ T5866] IPVS: starting estimator thread 0... [ 137.191471][ T6176] netlink: 'syz.2.74': attribute type 24 has an invalid length. [ 137.199430][ T6176] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 137.207014][ T6176] netlink: 228 bytes leftover after parsing attributes in process `syz.2.74'. [ 137.329104][ T6178] IPVS: using max 26 ests per chain, 62400 per kthread [ 137.728134][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.776861][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.874684][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.881880][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.966971][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.974262][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.158280][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'. [ 143.545244][ T6211] trusted_key: encrypted_key: insufficient parameters specified [ 143.993359][ T6216] jffs2: notice: (6216) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.026856][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.023522][ T6235] netlink: 'syz.2.82': attribute type 24 has an invalid length. [ 146.031278][ T6235] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 146.038887][ T6235] netlink: 228 bytes leftover after parsing attributes in process `syz.2.82'. [ 146.577618][ T6132] veth0_vlan: entered promiscuous mode [ 146.763998][ T6132] veth1_vlan: entered promiscuous mode [ 147.201919][ T6132] veth0_macvtap: entered promiscuous mode [ 147.279080][ T6132] veth1_macvtap: entered promiscuous mode [ 147.363128][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.415408][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.472130][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.528836][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.568633][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.608680][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.648844][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.689386][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.731534][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.976675][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.022619][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.088736][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.112038][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.138786][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.168776][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.189293][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.227980][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.263410][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.344739][ T6132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.418187][ T6132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.454271][ T6132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.491859][ T6132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.737692][ T6261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 150.439909][ T1093] hsr_slave_0: left promiscuous mode [ 150.541944][ T1093] hsr_slave_1: left promiscuous mode [ 150.602680][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.643893][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.737062][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.781919][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.838231][ T1093] bridge_slave_1: left allmulticast mode [ 150.874470][ T1093] bridge_slave_1: left promiscuous mode [ 150.914819][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.013674][ T1093] bridge_slave_0: left allmulticast mode [ 151.039093][ T1093] bridge_slave_0: left promiscuous mode [ 151.075239][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.370142][ T1093] veth1_macvtap: left promiscuous mode [ 151.376032][ T1093] veth0_macvtap: left promiscuous mode [ 151.398762][ T1093] veth1_vlan: left promiscuous mode [ 151.422242][ T1093] veth0_vlan: left promiscuous mode [ 153.181573][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 153.270909][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 153.358376][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.465361][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.470729][ T1093] bond0 (unregistering): Released all slaves [ 156.746081][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.815773][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.003795][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.134379][ T6309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.92'. [ 158.249320][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.072086][ T6323] jffs2: notice: (6323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 164.383341][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'. [ 165.209944][ T6351] jffs2: notice: (6351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.824414][ T6358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.102'. [ 167.694341][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.100'. [ 169.096389][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'. [ 176.594583][ T6412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.112'. [ 177.587635][ T6425] overlay: ./file0 is not a directory [ 177.800392][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.811902][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.836418][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.861021][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.869525][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.876773][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.033877][ T6428] rxe_eth0 speed is unknown, defaulting to 1000 [ 179.918091][ T5795] Bluetooth: hci0: command tx timeout [ 181.664396][ T6428] chnl_net:caif_netlink_parms(): no params data found [ 181.780416][ T6460] jffs2: notice: (6460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 181.980344][ T5795] Bluetooth: hci0: command tx timeout [ 183.344764][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 183.475831][ T6471] netlink: 32 bytes leftover after parsing attributes in process `syz.0.120'. [ 184.500630][ T5795] Bluetooth: hci0: command tx timeout [ 184.545537][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.617282][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.670051][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 184.728426][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.809780][ T9] usb 3-1: config 0 descriptor?? [ 184.832497][ T3463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.165755][ T3463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.266523][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.299548][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 185.328830][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.352503][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 185.368733][ T6428] bridge_slave_0: entered allmulticast mode [ 185.394972][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 185.412098][ T6428] bridge_slave_0: entered promiscuous mode [ 185.452757][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 185.475458][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.498752][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 185.505746][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 185.525345][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.562953][ T6428] bridge_slave_1: entered allmulticast mode [ 185.605196][ T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 185.629604][ T6428] bridge_slave_1: entered promiscuous mode [ 185.694277][ T9] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 185.773376][ T3463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.859985][ T9] cp2112 0003:10C4:EA90.0001: error requesting version [ 185.930447][ T9] cp2112: probe of 0003:10C4:EA90.0001 failed with error -32 [ 186.114239][ T6428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.210398][ T6428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.331777][ T3463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.542037][ T5795] Bluetooth: hci0: command tx timeout [ 186.554519][ T6428] team0: Port device team_slave_0 added [ 186.617073][ T6428] team0: Port device team_slave_1 added [ 186.905325][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.941371][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.042046][ T6428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.108358][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.163838][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.202601][ T1200] usb 3-1: USB disconnect, device number 2 [ 187.332975][ T6428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.626565][ T6503] overlay: ./file0 is not a directory [ 187.773228][ T6428] hsr_slave_0: entered promiscuous mode [ 187.899167][ T6428] hsr_slave_1: entered promiscuous mode [ 187.966758][ T6428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.003130][ T6428] Cannot create hsr debugfs directory [ 192.145397][ T6521] jffs2: notice: (6521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 193.512701][ T6527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.129'. [ 194.384336][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394042][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.130530][ T6428] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.164804][ T6428] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.216402][ T6428] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.339090][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 195.413350][ T6428] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.596831][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.675616][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.765548][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 195.827038][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.027131][ T9] usb 1-1: config 0 descriptor?? [ 196.050529][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.119755][ T3463] hsr_slave_0: left promiscuous mode [ 196.151336][ T3463] hsr_slave_1: left promiscuous mode [ 196.177305][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.207305][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.244661][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.456608][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.532160][ T3463] bridge_slave_1: left allmulticast mode [ 197.537886][ T3463] bridge_slave_1: left promiscuous mode [ 197.588868][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.663280][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 197.686810][ T3463] bridge_slave_0: left allmulticast mode [ 197.716228][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 197.736131][ T3463] bridge_slave_0: left promiscuous mode [ 197.762123][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 197.782153][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.812575][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 197.854987][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 197.922162][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 197.964443][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 198.020111][ T3463] veth1_macvtap: left promiscuous mode [ 198.032942][ T9] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 198.058829][ T3463] veth0_macvtap: left promiscuous mode [ 198.064548][ T3463] veth1_vlan: left promiscuous mode [ 198.114906][ T3463] veth0_vlan: left promiscuous mode [ 198.180201][ T9] cp2112 0003:10C4:EA90.0002: error requesting version [ 198.250147][ T9] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 199.967551][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.134'. [ 200.078106][ T9] usb 1-1: USB disconnect, device number 2 [ 205.216580][ T6588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.137'. [ 205.932513][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 206.130203][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 206.272715][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.413145][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.003836][ T3463] bond0 (unregistering): Released all slaves [ 207.269506][ T6428] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.367843][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.375036][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.505445][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.512652][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.190197][ T6428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.161348][ T6630] jffs2: notice: (6630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 212.586439][ T6428] veth0_vlan: entered promiscuous mode [ 212.651346][ T6428] veth1_vlan: entered promiscuous mode [ 212.769217][ T6188] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 212.781116][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 212.787276][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 212.805808][ T6428] veth0_macvtap: entered promiscuous mode [ 212.849819][ T6428] veth1_macvtap: entered promiscuous mode [ 212.935814][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.988714][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.010875][ T6188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.032839][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.053585][ T6188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.083957][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.094368][ T6188] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 213.130199][ T6188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.142191][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.164577][ T6188] usb 5-1: config 0 descriptor?? [ 213.186823][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.241641][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.316281][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.372614][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.623557][ T6645] netlink: 32 bytes leftover after parsing attributes in process `syz.2.145'. [ 214.789822][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.864908][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.916163][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.960352][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.984829][ T6188] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 215.028593][ T6188] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 215.036868][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.066160][ T6188] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 215.091639][ T6428] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.115839][ T6188] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 215.146852][ T6188] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 215.161729][ T6428] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.198807][ T6188] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 215.212056][ T6428] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.241319][ T6188] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 215.260633][ T6428] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.290524][ T6188] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 215.451081][ T6188] cp2112 0003:10C4:EA90.0003: error requesting version [ 215.498244][ T6188] cp2112: probe of 0003:10C4:EA90.0003 failed with error -32 [ 215.756130][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.806688][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.910341][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.918199][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.288961][ T9] usb 5-1: USB disconnect, device number 2 [ 218.682270][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 224.566072][ T6713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.153'. [ 224.871286][ T6718] mmap: syz.5.154 (6718) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 224.991888][ T6722] jffs2: notice: (6722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 226.428714][ T1200] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 226.615360][ T1200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.650653][ T1200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.711834][ T1200] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 226.762495][ T1200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.804644][ T1200] usb 1-1: config 0 descriptor?? [ 227.089080][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 227.214207][ T6760] jffs2: notice: (6760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 227.244743][ T6760] overlay: ./file0 is not a directory [ 227.288439][ T1200] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 227.326950][ T1200] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 227.354223][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 227.364647][ T1200] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 228.640195][ T9] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 228.668638][ T1200] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 228.696760][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 228.729881][ T1200] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 228.736895][ T1200] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 228.761636][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.796421][ T1200] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 228.822873][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 228.858071][ T1200] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 228.911009][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 228.971351][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.025261][ T1200] cp2112 0003:10C4:EA90.0004: error requesting version [ 229.049644][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.094660][ T1200] cp2112: probe of 0003:10C4:EA90.0004 failed with error -5 [ 229.125931][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.211117][ T9] usbtmc: probe of 5-1:16.0 failed with error -22 [ 230.591133][ T6781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.165'. [ 230.729919][ T6189] usb 1-1: USB disconnect, device number 3 [ 230.843024][ T9] usb 5-1: USB disconnect, device number 3 [ 231.094855][ T6788] jffs2: notice: (6788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.998593][ T6189] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 236.018896][ T1200] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 236.191839][ T6189] usb 3-1: Using ep0 maxpacket: 8 [ 236.233989][ T1200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.245998][ T6189] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 236.265448][ T1200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.279385][ T6189] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 236.331206][ T1200] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 236.353793][ T6189] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.387315][ T1200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.408584][ T6189] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 236.453940][ T1200] usb 1-1: config 0 descriptor?? [ 236.468576][ T6189] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 236.535518][ T6189] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.615519][ T6189] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.667058][ T6189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.746093][ T6189] usbtmc: probe of 3-1:16.0 failed with error -22 [ 236.953458][ T1200] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 236.983812][ T6843] jffs2: notice: (6843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.013052][ T6843] overlay: ./file0 is not a directory [ 237.048894][ T1200] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 237.083675][ T1200] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 237.121417][ T1200] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 237.156029][ T1200] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 237.189162][ T1200] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 237.217738][ T1200] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 237.296784][ T6848] jffs2: notice: (6848) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.347594][ T1200] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 237.470629][ T1200] cp2112 0003:10C4:EA90.0005: error requesting version [ 237.510587][ T1200] cp2112: probe of 0003:10C4:EA90.0005 failed with error -5 [ 238.762780][ T1200] usb 3-1: USB disconnect, device number 3 [ 240.131753][ T6189] usb 1-1: USB disconnect, device number 4 [ 243.680725][ T6913] trusted_key: encrypted_key: insufficient parameters specified [ 243.848676][ T1200] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 244.088619][ T1200] usb 3-1: Using ep0 maxpacket: 8 [ 244.105687][ T1200] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 244.138728][ T1200] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 244.202231][ T1200] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 244.252851][ T1200] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 244.317407][ T1200] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 244.368361][ T1200] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.450047][ T1200] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.504137][ T1200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.559391][ T1200] usbtmc: probe of 3-1:16.0 failed with error -22 [ 245.178244][ T6934] jffs2: notice: (6934) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 247.196887][ T9] usb 3-1: USB disconnect, device number 4 [ 247.472744][ T6189] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 247.665338][ T5795] Bluetooth: hci4: command 0x0406 tx timeout [ 247.691082][ T6189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.740961][ T6189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.790952][ T6189] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 247.841488][ T6189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.905271][ T6189] usb 5-1: config 0 descriptor?? [ 248.381911][ T6189] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 248.440333][ T6189] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 248.487549][ T6189] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 248.527060][ T6189] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 248.561905][ T6189] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 248.621603][ T6189] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 248.654973][ T6189] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 248.727639][ T6189] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 248.998669][ T6189] cp2112 0003:10C4:EA90.0006: error requesting version [ 249.037025][ T6189] cp2112: probe of 0003:10C4:EA90.0006 failed with error -5 [ 250.047638][ T6979] trusted_key: encrypted_key: insufficient parameters specified [ 251.881217][ T1200] usb 5-1: USB disconnect, device number 4 [ 252.078781][ T7000] (null): rxe_set_mtu: Set mtu to 1024 [ 252.109322][ T7000] wg1 speed is unknown, defaulting to 1000 [ 252.116704][ T7000] wg1 speed is unknown, defaulting to 1000 [ 252.202035][ T7000] wg1 speed is unknown, defaulting to 1000 [ 252.974640][ T7000] infiniband syz2: set active [ 252.980087][ T6189] wg1 speed is unknown, defaulting to 1000 [ 253.012490][ T7000] infiniband syz2: added wg1 [ 253.018166][ T7000] syz2: rxe_create_cq: returned err = -12 [ 253.055072][ T7000] infiniband syz2: Couldn't create ib_mad CQ [ 253.089001][ T7000] infiniband syz2: Couldn't open port 1 [ 253.196390][ T7000] RDS/IB: syz2: added [ 253.219889][ T7000] smc: adding ib device syz2 with port count 1 [ 253.226096][ T7000] smc: ib device syz2 port 1 has pnetid [ 253.292776][ T7000] wg1 speed is unknown, defaulting to 1000 [ 253.339222][ T6189] wg1 speed is unknown, defaulting to 1000 [ 253.812058][ T7014] jffs2: notice: (7014) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 253.929591][ T7000] wg1 speed is unknown, defaulting to 1000 [ 254.148627][ T1200] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 255.236680][ T1200] usb 1-1: device descriptor read/64, error -71 [ 255.617526][ T7030] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218) [ 255.760590][ T1200] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 255.824923][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.832439][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.859032][ T7000] wg1 speed is unknown, defaulting to 1000 [ 255.938634][ T1200] usb 1-1: device descriptor read/64, error -71 [ 256.091103][ T1200] usb usb1-port1: attempt power cycle [ 257.445269][ T7040] trusted_key: encrypted_key: insufficient parameters specified [ 257.578114][ T7000] wg1 speed is unknown, defaulting to 1000 [ 257.608588][ T1200] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 257.696390][ T1200] usb 1-1: device descriptor read/8, error -71 [ 260.268654][ T1200] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 261.669988][ T1200] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 261.709274][ T1200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.770774][ T1200] usb 5-1: Product: syz [ 261.774983][ T1200] usb 5-1: Manufacturer: syz [ 261.808790][ T1200] usb 5-1: SerialNumber: syz [ 262.348701][ T6188] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 262.564819][ T6188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.598727][ T6188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.658701][ T6188] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 262.708776][ T6188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.749938][ T6188] usb 3-1: config 0 descriptor?? [ 263.135741][ T1200] usb 5-1: 1:1: All rates were zero [ 263.159980][ T1200] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 263.213651][ T6188] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 263.254817][ T6188] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 263.300139][ T6188] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 263.343950][ T6188] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 263.365620][ T1200] usb 5-1: USB disconnect, device number 5 [ 263.397305][ T6188] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 263.478583][ T6188] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 263.507163][ T6745] udevd[6745]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.565559][ T6188] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 263.624528][ T6188] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 263.790083][ T6188] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 263.830492][ T6188] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 263.906176][ T6188] cp2112: probe of 0003:10C4:EA90.0007 failed with error -32 [ 265.309256][ T7103] trusted_key: encrypted_key: insufficient parameters specified [ 265.473339][ T6188] usb 3-1: USB disconnect, device number 5 [ 267.664195][ T7126] jffs2: notice: (7126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.203616][ T7150] trusted_key: encrypted_key: insufficient parameters specified [ 273.720590][ T7181] jffs2: notice: (7181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 275.277505][ T1200] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 275.497211][ T1200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.533123][ T1200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.593803][ T1200] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 275.643319][ T1200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.695301][ T1200] usb 5-1: config 0 descriptor?? [ 276.155009][ T1200] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 276.196925][ T1200] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 276.250582][ T1200] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 276.294392][ T1200] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 276.369277][ T1200] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 276.376281][ T1200] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 276.436820][ T1200] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 276.498958][ T1200] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 276.678739][ T1200] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 276.717835][ T1200] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 276.838098][ T1200] cp2112: probe of 0003:10C4:EA90.0008 failed with error -32 [ 276.902677][ T7215] jffs2: notice: (7215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 276.951996][ T7215] overlay: ./file0 is not a directory [ 277.595153][ T7227] ------------[ cut here ]------------ [ 277.600962][ T7227] WARNING: CPU: 0 PID: 7227 at net/netfilter/nf_queue.c:329 nf_reinject+0x284/0x870 [ 277.610434][ T7227] Modules linked in: [ 277.614366][ T7227] CPU: 0 PID: 7227 Comm: syz.2.235 Not tainted syzkaller #0 [ 277.621772][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.631904][ T7227] RIP: 0010:nf_reinject+0x284/0x870 [ 277.637128][ T7227] Code: 3a e8 80 fb a6 f8 89 c3 31 ff 89 c6 e8 45 67 be f8 85 db 74 61 e8 8c 63 be f8 e9 21 01 00 00 e8 82 63 be f8 0f 0b 4c 8b 3c 24 <0f> 0b e9 98 05 00 00 e8 70 63 be f8 e9 05 01 00 00 e8 66 63 be f8 [ 277.656818][ T7227] RSP: 0018:ffffc90004df6f68 EFLAGS: 00010287 [ 277.662931][ T7227] RAX: ffffffff88c972b9 RBX: 0000000000000006 RCX: 0000000000080000 [ 277.671039][ T7227] RDX: ffffc9000db0d000 RSI: 0000000000002917 RDI: 0000000000002918 [ 277.679057][ T7227] RBP: 0000000000000000 R08: ffff888023889e00 R09: 0000000000000003 [ 277.687038][ T7227] R10: 000000000000000a R11: 0000000000000002 R12: ffff88805db9b100 [ 277.695051][ T7227] R13: ffff88802cf22ff8 R14: ffff88805e7afa00 R15: ffff88805e7afa00 [ 277.703067][ T7227] FS: 00007f7f102d26c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 277.712042][ T7227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.718665][ T7227] CR2: 00007fff08e01128 CR3: 00000000336bf000 CR4: 00000000003506f0 [ 277.726651][ T7227] Call Trace: [ 277.729991][ T7227] [ 277.732945][ T7227] ? nfqnl_nf_hook_drop+0x91/0x2b0 [ 277.738077][ T7227] nfqnl_nf_hook_drop+0x1ed/0x2b0 [ 277.743155][ T7227] ? nf_queue_nf_hook_drop+0x1e/0x220 [ 277.748584][ T7227] nf_queue_nf_hook_drop+0x12a/0x220 [ 277.753903][ T7227] __nf_unregister_net_hook+0x4fb/0x6d0 [ 277.759506][ T7227] nf_tables_commit+0x57a9/0x82d0 [ 277.764563][ T7227] ? nft_chain_lookup+0x470/0x470 [ 277.769642][ T7227] ? nft_trans_commit_list_add_tail+0x302/0x410 [ 277.775915][ T7227] ? nft_flush_table+0x11f9/0x12e0 [ 277.781101][ T7227] ? nf_tables_deltable+0x679/0xe80 [ 277.786326][ T7227] ? nf_tables_gettable+0x6c0/0x6c0 [ 277.791602][ T7227] ? mutex_unlock+0x10/0x10 [ 277.796136][ T7227] nfnetlink_rcv+0x1ac8/0x2490 [ 277.801023][ T7227] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 277.806676][ T7227] ? __lock_acquire+0x7eb0/0x7eb0 [ 277.811777][ T7227] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.817000][ T7227] netlink_unicast+0x7b1/0x930 [ 277.821872][ T7227] netlink_sendmsg+0x8d0/0xbf0 [ 277.826693][ T7227] ? netlink_getsockopt+0x590/0x590 [ 277.832021][ T7227] ? apparmor_socket_sendmsg+0x170/0x330 [ 277.837685][ T7227] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 277.843070][ T7227] ? security_socket_sendmsg+0x80/0xa0 [ 277.848603][ T7227] ? netlink_getsockopt+0x590/0x590 [ 277.853835][ T7227] ____sys_sendmsg+0x61b/0x980 [ 277.858676][ T7227] ? __asan_memset+0x22/0x40 [ 277.863394][ T7227] ? __sys_sendmsg_sock+0x30/0x30 [ 277.868429][ T7227] ? __import_iovec+0x5f2/0x850 [ 277.873346][ T7227] ? import_iovec+0x73/0xa0 [ 277.877878][ T7227] ___sys_sendmsg+0x2a6/0x360 [ 277.882612][ T7227] ? __sys_sendmsg+0x2b0/0x2b0 [ 277.887431][ T7227] __se_sys_sendmsg+0x1d0/0x2c0 [ 277.892332][ T7227] ? __x64_sys_sendmsg+0x80/0x80 [ 277.897289][ T7227] ? lockdep_hardirqs_on+0x98/0x150 [ 277.902549][ T7227] do_syscall_64+0x55/0xb0 [ 277.906984][ T7227] ? clear_bhb_loop+0x40/0x90 [ 277.911716][ T7227] ? clear_bhb_loop+0x40/0x90 [ 277.916415][ T7227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.922357][ T7227] RIP: 0033:0x7f7f0f39f559 [ 277.926895][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.946590][ T7227] RSP: 002b:00007f7f102d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.955081][ T7227] RAX: ffffffffffffffda RBX: 00007f7f0f625fa0 RCX: 00007f7f0f39f559 [ 277.963141][ T7227] RDX: 0000000024040008 RSI: 0000200000000400 RDI: 000000000000000d [ 277.971206][ T7227] RBP: 00007f7f0f436b20 R08: 0000000000000000 R09: 0000000000000000 [ 277.979256][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.987247][ T7227] R13: 00007f7f0f626038 R14: 00007f7f0f625fa0 R15: 00007fff1ae55bd8 [ 277.995302][ T7227] [ 277.998355][ T7227] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 278.005648][ T7227] CPU: 0 PID: 7227 Comm: syz.2.235 Not tainted syzkaller #0 [ 278.012935][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 278.023183][ T7227] Call Trace: [ 278.026478][ T7227] [ 278.029418][ T7227] dump_stack_lvl+0x18c/0x250 [ 278.034117][ T7227] ? show_regs_print_info+0x20/0x20 [ 278.039330][ T7227] ? load_image+0x420/0x420 [ 278.043859][ T7227] panic+0x2ca/0x720 [ 278.047779][ T7227] ? bpf_jit_dump+0xd0/0xd0 [ 278.052332][ T7227] __warn+0x2e0/0x470 [ 278.056340][ T7227] ? nf_reinject+0x284/0x870 [ 278.060963][ T7227] ? nf_reinject+0x284/0x870 [ 278.065576][ T7227] report_bug+0x2be/0x4f0 [ 278.069929][ T7227] ? nf_reinject+0x284/0x870 [ 278.074534][ T7227] ? nf_reinject+0x284/0x870 [ 278.079135][ T7227] ? nf_reinject+0x286/0x870 [ 278.083736][ T7227] handle_bug+0xcf/0x120 [ 278.087995][ T7227] exc_invalid_op+0x1a/0x50 [ 278.092512][ T7227] asm_exc_invalid_op+0x1a/0x20 [ 278.097372][ T7227] RIP: 0010:nf_reinject+0x284/0x870 [ 278.102589][ T7227] Code: 3a e8 80 fb a6 f8 89 c3 31 ff 89 c6 e8 45 67 be f8 85 db 74 61 e8 8c 63 be f8 e9 21 01 00 00 e8 82 63 be f8 0f 0b 4c 8b 3c 24 <0f> 0b e9 98 05 00 00 e8 70 63 be f8 e9 05 01 00 00 e8 66 63 be f8 [ 278.122230][ T7227] RSP: 0018:ffffc90004df6f68 EFLAGS: 00010287 [ 278.128331][ T7227] RAX: ffffffff88c972b9 RBX: 0000000000000006 RCX: 0000000000080000 [ 278.136355][ T7227] RDX: ffffc9000db0d000 RSI: 0000000000002917 RDI: 0000000000002918 [ 278.144353][ T7227] RBP: 0000000000000000 R08: ffff888023889e00 R09: 0000000000000003 [ 278.152353][ T7227] R10: 000000000000000a R11: 0000000000000002 R12: ffff88805db9b100 [ 278.160354][ T7227] R13: ffff88802cf22ff8 R14: ffff88805e7afa00 R15: ffff88805e7afa00 [ 278.168359][ T7227] ? nf_reinject+0x4d9/0x870 [ 278.172977][ T7227] ? nf_reinject+0x4d9/0x870 [ 278.177584][ T7227] ? nfqnl_nf_hook_drop+0x91/0x2b0 [ 278.182813][ T7227] nfqnl_nf_hook_drop+0x1ed/0x2b0 [ 278.187876][ T7227] ? nf_queue_nf_hook_drop+0x1e/0x220 [ 278.193287][ T7227] nf_queue_nf_hook_drop+0x12a/0x220 [ 278.198692][ T7227] __nf_unregister_net_hook+0x4fb/0x6d0 [ 278.204372][ T7227] nf_tables_commit+0x57a9/0x82d0 [ 278.209436][ T7227] ? nft_chain_lookup+0x470/0x470 [ 278.214477][ T7227] ? nft_trans_commit_list_add_tail+0x302/0x410 [ 278.220748][ T7227] ? nft_flush_table+0x11f9/0x12e0 [ 278.225918][ T7227] ? nf_tables_deltable+0x679/0xe80 [ 278.231145][ T7227] ? nf_tables_gettable+0x6c0/0x6c0 [ 278.236362][ T7227] ? mutex_unlock+0x10/0x10 [ 278.240900][ T7227] nfnetlink_rcv+0x1ac8/0x2490 [ 278.245743][ T7227] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 278.251377][ T7227] ? __lock_acquire+0x7eb0/0x7eb0 [ 278.256436][ T7227] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.261684][ T7227] netlink_unicast+0x7b1/0x930 [ 278.266509][ T7227] netlink_sendmsg+0x8d0/0xbf0 [ 278.271294][ T7227] ? netlink_getsockopt+0x590/0x590 [ 278.276523][ T7227] ? apparmor_socket_sendmsg+0x170/0x330 [ 278.282172][ T7227] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 278.287472][ T7227] ? security_socket_sendmsg+0x80/0xa0 [ 278.292943][ T7227] ? netlink_getsockopt+0x590/0x590 [ 278.298162][ T7227] ____sys_sendmsg+0x61b/0x980 [ 278.302952][ T7227] ? __asan_memset+0x22/0x40 [ 278.307558][ T7227] ? __sys_sendmsg_sock+0x30/0x30 [ 278.312628][ T7227] ? __import_iovec+0x5f2/0x850 [ 278.317493][ T7227] ? import_iovec+0x73/0xa0 [ 278.322006][ T7227] ___sys_sendmsg+0x2a6/0x360 [ 278.326710][ T7227] ? __sys_sendmsg+0x2b0/0x2b0 [ 278.331527][ T7227] __se_sys_sendmsg+0x1d0/0x2c0 [ 278.336391][ T7227] ? __x64_sys_sendmsg+0x80/0x80 [ 278.341345][ T7227] ? lockdep_hardirqs_on+0x98/0x150 [ 278.346565][ T7227] do_syscall_64+0x55/0xb0 [ 278.351005][ T7227] ? clear_bhb_loop+0x40/0x90 [ 278.355690][ T7227] ? clear_bhb_loop+0x40/0x90 [ 278.360398][ T7227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.366303][ T7227] RIP: 0033:0x7f7f0f39f559 [ 278.370722][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.390337][ T7227] RSP: 002b:00007f7f102d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.398756][ T7227] RAX: ffffffffffffffda RBX: 00007f7f0f625fa0 RCX: 00007f7f0f39f559 [ 278.406773][ T7227] RDX: 0000000024040008 RSI: 0000200000000400 RDI: 000000000000000d [ 278.414763][ T7227] RBP: 00007f7f0f436b20 R08: 0000000000000000 R09: 0000000000000000 [ 278.422744][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.430741][ T7227] R13: 00007f7f0f626038 R14: 00007f7f0f625fa0 R15: 00007fff1ae55bd8 [ 278.438738][ T7227] [ 278.441825][ T7227] Kernel Offset: disabled [ 278.446253][ T7227] Rebooting in 86400 seconds..