last executing test programs: 11.266359957s ago: executing program 1 (id=881): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)={0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x0, r3}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil) shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 10.797882036s ago: executing program 0 (id=883): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5cdcc09c, 0x7, 0x3, 0x814, 0xffffffffffffffff, 0x3000000, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x2, 0x2, 0xd}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xfd12}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x3, 0x0, &(0x7f0000000280)) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/ptp0\x00'}, {}, {0x20, 'blkio.bfq.avg_queue_size\x00'}]}, 0x31) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x40048f1}, 0x4040084) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="201000000003fd42facbc57d070103000000000000000000000000090001"], 0x20}}, 0x0) r5 = eventfd(0x7) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/153, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x3000, 0xe, &(0x7f0000000480)=""/14}, {0xf004, 0x91, &(0x7f00000006c0)=""/145}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socket(0x1a, 0x80000, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x632f, 0x4) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r6, 0x3}, 0x10, &(0x7f00000003c0)={&(0x7f00000004c0)=@canfd={{0x2}, 0x22, 0x0, 0x0, 0x0, "2cf710d6e7e72e2e0858b52fe49ff6bdf05dee56692677237351b90b7d0211cc205bcbba9cad89249d499771383a47cfcebad05cd18ea4cee166a7e0e508c048"}, 0x48}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) socket(0x1e, 0x800000003, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) 10.537209137s ago: executing program 1 (id=885): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x23, &(0x7f0000000840)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @generic={0x1f, 0x3, 0x1, 0x5, 0x40}, @tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10.366893074s ago: executing program 0 (id=887): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000001680)=ANY=[@ANYBLOB="e20005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x7f, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x7, 0x20, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "ac70"}, {0x5, 0x24, 0x0, 0x5f7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff9, 0xa62c, 0xb7}, [@acm={0x4}, @country_functional={0xa, 0x24, 0x7, 0xc4, 0x3, [0x81, 0x10]}, @mdlm={0x15, 0x24, 0x12, 0x2}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x5c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4d, 0x5, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x9, 0x2}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x1, 0x2d, 0x10, 0x7f}, 0x21, &(0x7f0000000440)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x1, 0x13}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0x1, 0x6, 0x8, 0x7}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3805}}]}) r5 = syz_usbip_server_init(0x2) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8) io_pgetevents(r2, 0x5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={r3, r4+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x100000000]}, 0x8}) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r6}) write$eventfd(r6, &(0x7f00000000c0), 0x8) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x151b41) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x3, 0x100, &(0x7f0000000ac0)=ANY=[@ANYBLOB="120100002aafee08f00a5186678b75000000010902ee0002000000000904980004fd8fc707092101040301227f0b09050a1000000303fc090503001002000000072501000005000905800010000006040200090500000000070204072501000000000904010004ffffff0806240600011005240005000d240f0102000000000003000406241a03002808241c2754b403000a2407030100010100000a240100080002010209050700000000000007250100f2020009050100000002000b3232edc3dcea06fa3f605cf8a4ea877da99ff724daf560963c9af1a297f2a3fe13ece3e766722bdf56e2c7ed3e40928928fa09050000000000000009050c002000060002"], 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x20, 0x12, 0x68, "a0d7ab65b06bfdda5ac967d961c727af04b0216b96793458cccafca2c8076eeb76a73d779ee89c3c8a893ca0fd6ea167a32e8251bb6cbd0b94eda778585d808427725d69d5dbaf5b8da379c37ba49c0f71e9a3be9f363a736c1e8633a9934a80a62a145983f24359"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x140, 0x1, [0xf0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "3390"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "63e8"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}}) 10.145935122s ago: executing program 1 (id=888): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000001680)=ANY=[@ANYBLOB="e20005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x7b, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x7, 0x20, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "ac70"}, {0x5, 0x24, 0x0, 0x5f7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff9, 0xa62c, 0xb7}, [@acm={0x4}, @country_functional={0xa, 0x24, 0x7, 0xc4, 0x3, [0x81, 0x10]}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x5c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4d, 0x5, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x9, 0x2}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x1, 0x2d, 0x10, 0x7f}, 0x21, &(0x7f0000000440)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x1, 0x13}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0x1, 0x6, 0x8, 0x7}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3805}}]}) r5 = syz_usbip_server_init(0x2) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8) io_pgetevents(r2, 0x5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={r3, r4+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x100000000]}, 0x8}) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r6}) write$eventfd(r6, &(0x7f00000000c0), 0x8) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x151b41) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x3, 0x100, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x20, 0x12, 0x68, "a0d7ab65b06bfdda5ac967d961c727af04b0216b96793458cccafca2c8076eeb76a73d779ee89c3c8a893ca0fd6ea167a32e8251bb6cbd0b94eda778585d808427725d69d5dbaf5b8da379c37ba49c0f71e9a3be9f363a736c1e8633a9934a80a62a145983f24359"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x140, 0x1, [0xf0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "3390"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "63e8"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0003040200d472"], 0x0, 0x0, 0x0}, 0x0) 9.104857016s ago: executing program 3 (id=895): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)={0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x0, r3}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil) shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 6.672981226s ago: executing program 0 (id=896): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x78}}, 0x0) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) connect$pppoe(r7, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0x0, 0x47, &(0x7f0000000940)=""/71}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}, {0xf000, 0x9a, &(0x7f0000000bc0)=""/154}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x1, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="cc000000120009000000000000000000b9000000c516f2c41efcb7b1f20b32c5c7a3c7540a3c9e4f1b425f168d7e1d2f6e6dc8a277604a68132bb9828f9ff58fb1174c8b936c329335057ca096357122444ab7d59f9d48ed0eaccff228483fb01e9e3c9888208b6437a830215c918b3723a7701507a0c9b3bc05362422bb11daa9a0f3b71b2dd46db1df58"], 0xcc}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16}, 0x48) 6.608522128s ago: executing program 1 (id=897): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5cdcc09c, 0x7, 0x3, 0x814, 0xffffffffffffffff, 0x3000000, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x2, 0x2, 0xd}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xfd12}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x3, 0x0, &(0x7f0000000280)) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/ptp0\x00'}, {}, {0x20, 'blkio.bfq.avg_queue_size\x00'}]}, 0x31) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x40048f1}, 0x4040084) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="201000000003fd42facbc57d07010300000000000000000000000009000100fde5c122"], 0x20}}, 0x0) r5 = eventfd(0x7) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/153, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x3000, 0xe, &(0x7f0000000480)=""/14}, {0xf004, 0x91, &(0x7f00000006c0)=""/145}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socket(0x1a, 0x80000, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x632f, 0x4) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r6, 0x3}, 0x10, &(0x7f00000003c0)={&(0x7f00000004c0)=@canfd={{0x2}, 0x22, 0x0, 0x0, 0x0, "2cf710d6e7e72e2e0858b52fe49ff6bdf05dee56692677237351b90b7d0211cc205bcbba9cad89249d499771383a47cfcebad05cd18ea4cee166a7e0e508c048"}, 0x48}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) socket(0x1e, 0x800000003, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) 5.989356633s ago: executing program 0 (id=900): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$can_raw(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@canfd={{}, 0xff, 0x0, 0x0, 0x0, "9d122114364ad4aa2056dd37bdddc89b0a33b77b1de93ecdd50d034d562822d4f2f4a57dce3cb31166f662c0c5797734840fd0012a65d3e21ebdb7d18658b76d"}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="4c000000130010002cbd7000fbdbdf2509077f054e214e210800000026e47e300a0000000400000004000000ff7f00003f00000000000080", @ANYRES32=r5, @ANYBLOB="800000005cffff0e08000000f8fffffff83db212a70385f43145ac63c92f30e8b810f4a1ea003f23e70d122b39f757b4776ef078ae97273c500243fba0a2b4703617bf48443b66f50833058789ecab20d6eb2d586b079888b36fc1fa4127b77f4e3970bb0f462dcafd8db022b66eb9ce094f617703975092837c27ab5e00655654a12642e41efb99bf3305ccb98fa2ffaa38f942b69e9daf60c8c7351f83c03acffb7f04e05d59993136213572cd00f0564f"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0) 5.867986118s ago: executing program 3 (id=902): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x9, 0x5f2, 0x400, 0x2, 0x18}) r1 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setflags(r1, 0x2, 0x0) r2 = syz_clone(0x4a00e100, &(0x7f0000000100)="677d4e2320eabbc9259f66ae60c0986a6d0ed035a6dd6afad0ca5fc1cf6f74de39b0a5ac1ea7e348ec8eb45e0d0d910ce322d38ac113f318c3ff7f65b93f557405223e8c56e4564a54e560283a6ce63a5b35d5e525848d3e7e750649e3e5fe1824ae5e8c2bc042dfe21d2576228845206e3b9f137e1a391bf883d662d9d0788b22acb71b715efd9c42cc319611c801563548d772b1899414ccb4ee9d", 0x9c, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="db15f0d491e4c279e567cea2c54d22fc39c92a820b48d856e63ae84fedbbf5885f96e6c1bf9c2b9221f7f73e9f8bca2aed0e830a23d7f2e672e39de4a24d87b9a3e1ab9eec2f8afdc9a2c059f7edbc0d0caacf8fcf9b") sched_setscheduler(r2, 0x6, &(0x7f00000002c0)=0xfffff89a) ptrace$cont(0x1f, r2, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x9, 0xc9, 0xc8, 0x1}}}, 0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0xfb, 0x3, 0x9, "f89410", 0x4, 0x33}, {@any, 0x6, 0x0, 0xb, "982856", 0x2, 0x8}, {@any, 0x10, 0xae, 0x6, "8e231b", 0x0, 0xa}, {@none, 0x9, 0x1, 0x9, "b3dcc7", 0x3, 0x1}, {@any, 0xff, 0x4, 0x3, "7beeb8", 0xfc8, 0xf8}]}}}, 0x4f) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x6}}]}}, 0xf) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r4, 0x20000000) keyctl$clear(0x7, r4) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000004c0)={0x0, {0x7, 0x8001}}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000500), 0x4003) r5 = accept4$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e, 0x80800) r6 = getegid() r7 = geteuid() r8 = getgid() getgroups(0x5, &(0x7f0000001000)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) r10 = socket$pppoe(0x18, 0x1, 0x0) r11 = memfd_create(&(0x7f00000011c0)='/dev/radio#\x00', 0x0) sendmmsg$unix(r5, &(0x7f0000001c80)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000680)="49dce0a50baad21fd1cbf7fc18e8cde5089d47cc7448a000c7d0ed9c5429b341b09c36aaa75ddd1dd4bc099a221e7dda458f3e1bc65be22cffccab57e27877c2a06d97029974296e6c5c0b55731a892f87aa52a5ee9f4115b9fde9e2e10ad8d90ffd268a330ef2d08774a7a6a3", 0x6d}, {&(0x7f0000000700)="0e05b83a5accdba0e1958128702d073706f7aa2a94ac7a24b94812bce870240058a546ab809a6f7c0854188bbddf9ede55ed47fa1d8debdc498501c1be503de7ce079d0d794d9809980b6abdd2201b6afb1c2800175b04522c2f14c4cd170684c02f06de087e664bf9a01edc2c7914916bd11eddbe8f8ad7f1b3795a62a4b4fcaf05aa667a00a6025755c561292c8a6ca1a8ea0f85f1515bb7eb0e3a610e7c8d49de5e4ae50cdc2a4546301248117cdd87393eaf3f33b5a0b7dbe54342a19090d58818d18b11e2b071f46de5c9e03118726de5bdfb2be89e9b3109efa6fa4d4e8006edebf062fba0", 0xe8}, {&(0x7f0000000800)="b9b571e7cc407e3875c16127938d4f092eb024a250615a1858a70e04ccbcfd20a49b3805f9eb89b894014eb0afc7631520cfb94253225275aef6067c9463dd241b7e15a2980b262134630140", 0x4c}, {&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000980)="f06f32973508442a435dcb0fd3a416f99f9bde7a95e594e9a856d86fa265d834068ad07fa07555a41fd438745e6cd3d5dabdfb30cf44e29824ff92a956633ed79d3807742be3e1b8ce07f35849d78eab72986dcc555f4641448274ddafb7ac80d5807d425ec82398f3a8fa5dfa87dec12b30536a2af882566ee072315e8878e351fed9e9c1f9a67ec7f981cb813c5bc377c6e74ebca1e60d4d7a15faa547694ecfea93b0611d5511dc508080413116b60635b6f1a95872d1f9813defb8504b3b782c4443b96bc2b0748aac900672ecc8139b894e761e60df29a7378ae0730219ca49be2effe8f33bda", 0xe9}, {&(0x7f0000000a80)="d199359ccdf5ac6123f43185b86ee7a0aad78215e1856261f2e595fce8aea545711fc0f4f23d28e8091dd485a87bd38d71fb38a449a8ca8e9e3835f543c0af7f7da6319532262e6bb8a56e402ed86939c30e1b9b39f0ddcaea119705ea9aad88afd2f7a2b4c153868ace7becdef03b575a897940a70b237a872f0a758f8015e8e55c498faab1401baef4e13f950d39", 0x8f}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x20, 0x20d2}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c80)="51dd4c9d3f920903aa2a431384c2156e72355094d637667803b552378d81a1cf4994d336df16a3189bbc1765bdf41b3d9074511805288661be9955e046f4a3304aa5f196727b675345c8b32235e6912d659f1fc3305096597cc15d93a73c07f4ec2b6cf7a3ca6b610d3d", 0x6a}, {&(0x7f0000000d00)="91eed3eb9c1f350722f1038a228d487f6504a87fba5cca69f085caf0f76ad357581d3dbf970ef3e8", 0x28}, {&(0x7f0000000d40)="f358bf3ea9d0a823bbe811e759898fcff8be49aaff0ffc708318db8585b95f1c18b2cc68f0b84dbd9150197a31e19004980014cd8298f864c4a7d78f1da2d4f85349d64f2bdfbe8a547ad83652e47baadaf16fbaf8f2c06dd1cc7312539108fceb3da3faea4b", 0x66}, {&(0x7f0000000dc0)}, {&(0x7f0000000e40)="68decc6306e9bb5809f04c0a24adaff4bc00c7f5461ae9cc4037e5457d0805f1ecb5e5dd64060ae53f6527f6d851ff39454caf082b8de5b750a865527401309f53a01c7055db5ca762dc0665841af06818ad263ad062a66355a13a1c37700b3414cdc1a51423f295125c727be76e5e7f53c37647e6e986fe44c6d87d0745a614fffd97b45a07b46cfd3de483d7dbb2b62c083c2bbcddb3f796b9e1ab11527c39ad79d8978cdbc112727bbdb9e2d0a8e307061eaaa3444ac850580b4186aee6c34dc069e0301e25af63169b93129060282d80a2ebc247ba5474be6a58", 0xdc}, {&(0x7f0000000f40)="17d7374897643b45b1abacf6d30f2b3ed36e96b35703b591503b725be746b5f3779734ee1b39911e7e046853cfb2275baa11b973a3", 0x35}], 0x6, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r2, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, r9}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r3, r0, r3, r10]}}, @rights={{0x20, 0x1, 0x1, [r11, r0, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x100, 0x800}}, {{&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000014c0)="c42397524dc6db63696ba6f71035699abadd6a3d576e046acaf3dc8871e197750cd66a367d453ec9b5cb955b5180cbdc5b7aece3ef0804eb87a7116cb31730acb51167cfd1eb67e1df957c44e0255c2ae9b7b96d1e22041f5b010e3107c5d706c97f475b8613d184cb2200a844e8171bc479c0f85caf014df0fd9b52c642d8cd132e138143820a3537b9cb1cd0b0e1feaa68673912338daaa1e22ed3809313a902d9ab8e377214b7debd3ea2258646bee03173d38334884e278f8ab5c7b7fb7fbce3d678ea7faaacab098ab1c88caaa05f82c28ef9b215ac5985f227c60035e05d850514ab74818f32a330281426e32e1230a537f6", 0xf5}], 0x1, &(0x7f0000001b40)=[@rights={{0x24, 0x1, 0x1, [r3, r3, r3, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r1, r1, r3, r3, r1, r0]}}], 0x130, 0x1}}], 0x3, 0x44000) 5.779056852s ago: executing program 1 (id=903): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r5, 0x0, r3}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil) shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 5.480089425s ago: executing program 0 (id=906): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000001680)=ANY=[@ANYBLOB="e20005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x7f, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x7, 0x20, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "ac70"}, {0x5, 0x24, 0x0, 0x5f7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff9, 0xa62c, 0xb7}, [@acm={0x4}, @country_functional={0xa, 0x24, 0x7, 0xc4, 0x3, [0x81, 0x10]}, @mdlm={0x15, 0x24, 0x12, 0x2}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x5c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4d, 0x5, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x9, 0x2}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x1, 0x2d, 0x10, 0x7f}, 0x21, &(0x7f0000000440)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x1, 0x13}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0x1, 0x6, 0x8, 0x7}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3805}}]}) r5 = syz_usbip_server_init(0x2) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8) io_pgetevents(r2, 0x5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={r3, r4+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x100000000]}, 0x8}) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r6}) write$eventfd(r6, &(0x7f00000000c0), 0x8) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x151b41) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x3, 0x100, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x20, 0x12, 0x68, "a0d7ab65b06bfdda5ac967d961c727af04b0216b96793458cccafca2c8076eeb76a73d779ee89c3c8a893ca0fd6ea167a32e8251bb6cbd0b94eda778585d808427725d69d5dbaf5b8da379c37ba49c0f71e9a3be9f363a736c1e8633a9934a80a62a145983f24359"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x140, 0x1, [0xf0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "3390"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "63e8"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}}) 5.34526096s ago: executing program 1 (id=907): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.270300573s ago: executing program 2 (id=908): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x28}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000000", @ANYBLOB], 0x38}, 0x0) 5.186243297s ago: executing program 4 (id=909): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$nci(0xffffffffffffffff, 0x0, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) rmdir(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}}}, 0x48) 2.907619071s ago: executing program 4 (id=910): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000700)=@req={0x10000, 0x5, 0x80, 0xa00}, 0x10) sendmmsg(r0, &(0x7f0000004ac0), 0x0, 0x0) 2.907026211s ago: executing program 3 (id=911): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x78}}, 0x0) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x0, @remote, 'gretap0\x00'}}, 0x1e) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0x0, 0x47, &(0x7f0000000940)=""/71}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}, {0xf000, 0x9a, &(0x7f0000000bc0)=""/154}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x1, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="cc000000120009000000000000000000b9000000c516f2c41efcb7b1f20b32c5c7a3c7540a3c9e4f1b425f168d7e1d2f6e6dc8a277604a68132bb9828f9ff58fb1174c8b936c329335057ca096357122444ab7d59f9d48ed0eaccff228483fb01e9e3c9888208b6437a830215c918b3723a7701507a0c9b3bc05362422bb11daa9a0f3b71b2dd46db1df58"], 0xcc}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16}, 0x48) 2.769126316s ago: executing program 2 (id=912): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)={0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x0, r3}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil) shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 2.326302064s ago: executing program 4 (id=913): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5cdcc09c, 0x7, 0x3, 0x814, 0xffffffffffffffff, 0x3000000, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x2, 0x2, 0xd}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xfd12}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x3, 0x0, &(0x7f0000000280)) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/ptp0\x00'}, {}, {0x20, 'blkio.bfq.avg_queue_size\x00'}]}, 0x31) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x40048f1}, 0x4040084) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="201000000003fd42facbc57d07010300000000000000000000000009000100fde5c122"], 0x20}}, 0x0) r5 = eventfd(0x7) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/153, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x3000, 0xe, &(0x7f0000000480)=""/14}, {0xf004, 0x91, &(0x7f00000006c0)=""/145}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socket(0x1a, 0x80000, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x632f, 0x4) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r6, 0x3}, 0x10, &(0x7f00000003c0)={&(0x7f00000004c0)=@canfd={{0x2}, 0x22, 0x0, 0x0, 0x0, "2cf710d6e7e72e2e0858b52fe49ff6bdf05dee56692677237351b90b7d0211cc205bcbba9cad89249d499771383a47cfcebad05cd18ea4cee166a7e0e508c048"}, 0x48}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) socket(0x1e, 0x800000003, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) 2.078887564s ago: executing program 2 (id=914): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0x0, 0x47, &(0x7f0000000940)=""/71}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}, {0xf000, 0x9a, &(0x7f0000000bc0)=""/154}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="cc000000120009000000000000000000b9000000c516f2c41efcb7b1f20b32c5c7a3c7540a3c9e4f1b425f168d7e1d2f6e6dc8a277604a68132bb9828f9ff58fb1174c8b936c329335057ca096357122444ab7d59f9d48ed0eaccff228483fb01e9e3c9888208b6437a830215c918b3723a7701507a0c9b3bc05362422bb11daa9a0f3b71b2dd46db1df58"], 0xcc}], 0x1}, 0x0) 2.067210455s ago: executing program 3 (id=915): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.883912832s ago: executing program 4 (id=916): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$can_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@canfd={{}, 0xff, 0x0, 0x0, 0x0, "9d122114364ad4aa2056dd37bdddc89b0a33b77b1de93ecdd50d034d562822d4f2f4a57dce3cb31166f662c0c5797734840fd0012a65d3e21ebdb7d18658b76d"}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="4c000000130010002cbd7000fbdbdf2509077f054e214e210800000026e47e300a0000000400000004000000ff7f00003f00000000000080", @ANYRES32=r4, @ANYBLOB="800000005cffff0e08000000f8fffffff83db212a70385f43145ac63c92f30e8b810f4a1ea003f23e70d122b39f757b4776ef078ae97273c500243fba0a2b4703617bf48443b66f50833058789ecab20d6eb2d586b079888b36fc1fa4127b77f4e3970bb0f462dcafd8db022b66eb9ce094f617703975092837c27ab5e00655654a12642e41efb99bf3305ccb98fa2ffaa38f942b69e9daf60c8c7351f83c03acffb7f04e05d59993136213572cd00f0564f"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) 1.69186936s ago: executing program 2 (id=917): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r5, 0x0, r3}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil) shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 1.482503319s ago: executing program 3 (id=918): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000003a80)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 1.292785407s ago: executing program 2 (id=919): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000c95"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f0000000200)=ANY=[@ANYRES32]) 1.285431487s ago: executing program 4 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x810, r1, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x7beee3e7}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1.082351805s ago: executing program 3 (id=921): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$nci(0xffffffffffffffff, 0x0, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) rmdir(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}}}, 0x48) 159.944893ms ago: executing program 4 (id=922): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x9, 0x5f2, 0x400, 0x2, 0x18}) r1 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setflags(r1, 0x2, 0x0) r2 = syz_clone(0x4a00e100, &(0x7f0000000100)="677d4e2320eabbc9259f66ae60c0986a6d0ed035a6dd6afad0ca5fc1cf6f74de39b0a5ac1ea7e348ec8eb45e0d0d910ce322d38ac113f318c3ff7f65b93f557405223e8c56e4564a54e560283a6ce63a5b35d5e525848d3e7e750649e3e5fe1824ae5e8c2bc042dfe21d2576228845206e3b9f137e1a391bf883d662d9d0788b22acb71b715efd9c42cc319611c801563548d772b1899414ccb4ee9d", 0x9c, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="db15f0d491e4c279e567cea2c54d22fc39c92a820b48d856e63ae84fedbbf5885f96e6c1bf9c2b9221f7f73e9f8bca2aed0e830a23d7f2e672e39de4a24d87b9a3e1ab9eec2f8afdc9a2c059f7edbc0d0caacf8fcf9b") sched_setscheduler(r2, 0x6, &(0x7f00000002c0)=0xfffff89a) ptrace$cont(0x1f, r2, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x9, 0xc9, 0xc8, 0x1}}}, 0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0xfb, 0x3, 0x9, "f89410", 0x4, 0x33}, {@any, 0x6, 0x0, 0xb, "982856", 0x2, 0x8}, {@any, 0x10, 0xae, 0x6, "8e231b", 0x0, 0xa}, {@none, 0x9, 0x1, 0x9, "b3dcc7", 0x3, 0x1}, {@any, 0xff, 0x4, 0x3, "7beeb8", 0xfc8, 0xf8}]}}}, 0x4f) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x6}}]}}, 0xf) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r4, 0x20000000) keyctl$clear(0x7, r4) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000004c0)={0x0, {0x7, 0x8001}}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000500), 0x4003) r5 = accept4$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e, 0x80800) r6 = getegid() r7 = geteuid() r8 = getgid() getgroups(0x5, &(0x7f0000001000)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) r10 = socket$pppoe(0x18, 0x1, 0x0) r11 = memfd_create(&(0x7f00000011c0)='/dev/radio#\x00', 0x0) sendmmsg$unix(r5, &(0x7f0000001c80)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000680)="49dce0a50baad21fd1cbf7fc18e8cde5089d47cc7448a000c7d0ed9c5429b341b09c36aaa75ddd1dd4bc099a221e7dda458f3e1bc65be22cffccab57e27877c2a06d97029974296e6c5c0b55731a892f87aa52a5ee9f4115b9fde9e2e10ad8d90ffd268a330ef2d08774a7a6a3", 0x6d}, {&(0x7f0000000700)="0e05b83a5accdba0e1958128702d073706f7aa2a94ac7a24b94812bce870240058a546ab809a6f7c0854188bbddf9ede55ed47fa1d8debdc498501c1be503de7ce079d0d794d9809980b6abdd2201b6afb1c2800175b04522c2f14c4cd170684c02f06de087e664bf9a01edc2c7914916bd11eddbe8f8ad7f1b3795a62a4b4fcaf05aa667a00a6025755c561292c8a6ca1a8ea0f85f1515bb7eb0e3a610e7c8d49de5e4ae50cdc2a4546301248117cdd87393eaf3f33b5a0b7dbe54342a19090d58818d18b11e2b071f46de5c9e03118726de5bdfb2be89e9b3109efa6fa4d4e8006edebf062fba0", 0xe8}, {&(0x7f0000000800)="b9b571e7cc407e3875c16127938d4f092eb024a250615a1858a70e04ccbcfd20a49b3805f9eb89b894014eb0afc7631520cfb94253225275aef6067c9463dd241b7e15a2980b262134630140", 0x4c}, {&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000980)="f06f32973508442a435dcb0fd3a416f99f9bde7a95e594e9a856d86fa265d834068ad07fa07555a41fd438745e6cd3d5dabdfb30cf44e29824ff92a956633ed79d3807742be3e1b8ce07f35849d78eab72986dcc555f4641448274ddafb7ac80d5807d425ec82398f3a8fa5dfa87dec12b30536a2af882566ee072315e8878e351fed9e9c1f9a67ec7f981cb813c5bc377c6e74ebca1e60d4d7a15faa547694ecfea93b0611d5511dc508080413116b60635b6f1a95872d1f9813defb8504b3b782c4443b96bc2b0748aac900672ecc8139b894e761e60df29a7378ae0730219ca49be2effe8f33bda", 0xe9}, {&(0x7f0000000a80)="d199359ccdf5ac6123f43185b86ee7a0aad78215e1856261f2e595fce8aea545711fc0f4f23d28e8091dd485a87bd38d71fb38a449a8ca8e9e3835f543c0af7f7da6319532262e6bb8a56e402ed86939c30e1b9b39f0ddcaea119705ea9aad88afd2f7a2b4c153868ace7becdef03b575a897940a70b237a872f0a758f8015e8e55c498faab1401baef4e13f950d39", 0x8f}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x20, 0x20d2}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c80)="51dd4c9d3f920903aa2a431384c2156e72355094d637667803b552378d81a1cf4994d336df16a3189bbc1765bdf41b3d9074511805288661be9955e046f4a3304aa5f196727b675345c8b32235e6912d659f1fc3305096597cc15d93a73c07f4ec2b6cf7a3ca6b610d3d", 0x6a}, {&(0x7f0000000d00)="91eed3eb9c1f350722f1038a228d487f6504a87fba5cca69f085caf0f76ad357581d3dbf970ef3e8", 0x28}, {&(0x7f0000000d40)="f358bf3ea9d0a823bbe811e759898fcff8be49aaff0ffc708318db8585b95f1c18b2cc68f0b84dbd9150197a31e19004980014cd8298f864c4a7d78f1da2d4f85349d64f2bdfbe8a547ad83652e47baadaf16fbaf8f2c06dd1cc7312539108fceb3da3faea4b", 0x66}, {&(0x7f0000000dc0)="6d69889556e610c2fd08f91df7f6332c7d0da0086a8a8c59180ab644e34a8e52c4332a7d98310cf6caafd4020fbd", 0x2e}, {&(0x7f0000000e40)="68decc6306e9bb5809f04c0a24adaff4bc00c7f5461ae9cc4037e5457d0805f1ecb5e5dd64060ae53f6527f6d851ff39454caf082b8de5b750a865527401309f53a01c7055db5ca762dc0665841af06818ad263ad062a66355a13a1c37700b3414cdc1a51423f295125c727be76e5e7f53c37647e6e986fe44c6d87d0745a614fffd97b45a07b46cfd3de483d7dbb2b62c083c2bbcddb3f796b9e1ab11527c39ad79d8978cdbc112727bbdb9e2d0a8e307061eaaa3444ac850580b4186aee6c34dc069e0301e25af63169b93129060282d80a2ebc247ba5474be6a58", 0xdc}, {&(0x7f0000000f40)="17d7374897643b45b1abacf6d30f2b3ed36e96b35703b591503b725be746b5f3779734ee1b39911e7e046853cfb2275baa11b973a3", 0x35}], 0x6, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r2, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, r9}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r3, r0, r3, r10]}}, @rights={{0x20, 0x1, 0x1, [r11, r0, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x100, 0x800}}, {{&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000014c0)="c42397524dc6db63696ba6f71035699abadd6a3d576e046acaf3dc8871e197750cd66a367d453ec9b5cb955b5180cbdc5b7aece3ef0804eb87a7116cb31730acb51167cfd1eb67e1df957c44e0255c2ae9b7b96d1e22041f5b010e3107c5d706c97f475b8613d184cb2200a844e8171bc479c0f85caf014df0fd9b52c642d8cd132e138143820a3537b9cb1cd0b0e1feaa68673912338daaa1e22ed3809313a902d9ab8e377214b7debd3ea2258646bee03173d38334884e278f8ab5c7b7fb7fbce3d678ea7faaacab098ab1c88caaa05f82c28ef9b215ac5985f227c60035e05d850514ab74818f32a330281426e32e1230a537f6", 0xf5}], 0x1, &(0x7f0000001b40)=[@rights={{0x24, 0x1, 0x1, [r3, r3, r3, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r1, r1, r3, r3, r1, r0]}}], 0x130, 0x1}}], 0x3, 0x44000) 43.795408ms ago: executing program 2 (id=923): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$can_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@canfd={{}, 0xff, 0x0, 0x0, 0x0, "9d122114364ad4aa2056dd37bdddc89b0a33b77b1de93ecdd50d034d562822d4f2f4a57dce3cb31166f662c0c5797734840fd0012a65d3e21ebdb7d18658b76d"}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="4c000000130010002cbd7000fbdbdf2509077f054e214e210800000026e47e300a0000000400000004000000ff7f00003f00000000000080", @ANYRES32=r4, @ANYBLOB="800000005cffff0e08000000f8fffffff83db212a70385f43145ac63c92f30e8b810f4a1ea003f23e70d122b39f757b4776ef078ae97273c500243fba0a2b4703617bf48443b66f50833058789ecab20d6eb2d586b079888b36fc1fa4127b77f4e3970bb0f462dcafd8db022b66eb9ce094f617703975092837c27ab5e00655654a12642e41efb99bf3305ccb98fa2ffaa38f942b69e9daf60c8c7351f83c03acffb7f04e05d59993136213572cd00f0564f"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) 0s ago: executing program 0 (id=924): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)={0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x0, r3}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil) shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) kernel console output (not intermixed with test programs): mand tx timeout [ 51.804110][ T3555] Bluetooth: hci3: command tx timeout [ 51.804388][ T3562] Bluetooth: hci2: command tx timeout [ 51.809675][ T3555] Bluetooth: hci1: command tx timeout [ 51.834440][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.842983][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.858306][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.869738][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.882604][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.907658][ T3547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.928136][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.937084][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.946595][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.956222][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.965321][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.973602][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.982206][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.993344][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.005390][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.016537][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.031924][ T3546] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.046679][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.055497][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.063160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.071514][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.103143][ T3548] device veth0_vlan entered promiscuous mode [ 52.119037][ T3559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.127773][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.137072][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.154531][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.163380][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.183171][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.204763][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.213890][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.221123][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.242874][ T3548] device veth1_vlan entered promiscuous mode [ 52.273369][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.281948][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.291453][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.300846][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.309692][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.316875][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.325124][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.334619][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.371708][ T3547] device veth0_vlan entered promiscuous mode [ 52.394200][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.402162][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.417096][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.428379][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.437303][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.445888][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.454478][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.463247][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.476474][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.497414][ T3547] device veth1_vlan entered promiscuous mode [ 52.517615][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.526886][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.535646][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.544707][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.553377][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.607798][ T3548] device veth0_macvtap entered promiscuous mode [ 52.617114][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.626250][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.635863][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.644840][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.653259][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.662257][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.671149][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.679913][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.690382][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.709345][ T3547] device veth0_macvtap entered promiscuous mode [ 52.722410][ T3548] device veth1_macvtap entered promiscuous mode [ 52.750967][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.759793][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.768588][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.777897][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.787892][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.796668][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.805717][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.814013][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.823082][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.838124][ T3548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.853248][ T3548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.862454][ T3545] device veth0_vlan entered promiscuous mode [ 52.869642][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.877521][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.885713][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.894622][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.903193][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.912098][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.940127][ T3548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.951477][ T3548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.969619][ T3548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.979915][ T3548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.999114][ T3547] device veth1_macvtap entered promiscuous mode [ 53.014751][ T3545] device veth1_vlan entered promiscuous mode [ 53.053187][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.068434][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.080474][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.090141][ T3559] device veth0_vlan entered promiscuous mode [ 53.097808][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.106693][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.115237][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.124220][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.132632][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.141357][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.151767][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.162316][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.175150][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.185743][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.201060][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.211909][ T3547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.221304][ T3547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.230539][ T3547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.239697][ T3547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.272313][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.283119][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.292502][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.306621][ T3559] device veth1_vlan entered promiscuous mode [ 53.347001][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.355160][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.381478][ T3546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.416835][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.431933][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.433099][ T3545] device veth0_macvtap entered promiscuous mode [ 53.449829][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.459126][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.467904][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.476439][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.507921][ T3545] device veth1_macvtap entered promiscuous mode [ 53.551121][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.562684][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.574659][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.585262][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.597079][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.613377][ T3559] device veth0_macvtap entered promiscuous mode [ 53.622563][ T2439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.632398][ T2439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.646368][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.654710][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.662763][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.671725][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.680522][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.689452][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.698323][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.707266][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.717475][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.728080][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.741089][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.751821][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.766854][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.786762][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.794915][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.803421][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.814343][ T3559] device veth1_macvtap entered promiscuous mode [ 53.824902][ T3545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.833627][ T3545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.842588][ T3545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.851543][ T3545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.864413][ T3555] Bluetooth: hci4: command tx timeout [ 53.864587][ T3561] Bluetooth: hci2: command tx timeout [ 53.869826][ T3555] Bluetooth: hci3: command tx timeout [ 53.876977][ T3562] Bluetooth: hci0: command tx timeout [ 53.880599][ T3555] Bluetooth: hci1: command tx timeout [ 53.913638][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.918091][ T3546] device veth0_vlan entered promiscuous mode [ 53.953572][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.984181][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.992296][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.001772][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.012253][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.023190][ T3546] device veth1_vlan entered promiscuous mode [ 54.038996][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.068528][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.078461][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.089113][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.099316][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.111111][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.122367][ T3559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.137288][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.146849][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.160816][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.168904][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.176992][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.186188][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.195417][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.204621][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.236930][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.247954][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.262686][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.274654][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.284706][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.295446][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.306818][ T3559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.341777][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.351556][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.360361][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.369150][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.378828][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.390163][ T3559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.399821][ T3559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.409325][ T3559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.419036][ T3559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.437641][ T3546] device veth0_macvtap entered promiscuous mode [ 54.449200][ T3546] device veth1_macvtap entered promiscuous mode [ 54.492352][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.523616][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.527498][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.545009][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.555801][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.566763][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.577139][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.588583][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.598876][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.610845][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.636251][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.660533][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.671366][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.680125][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.688991][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.703530][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.715927][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.726334][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.737357][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.748598][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.759389][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.769742][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.780647][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.791906][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.822813][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.832081][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.843434][ T3546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.854682][ T3546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.863422][ T3546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.872693][ T3546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.895013][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.907056][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.921756][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.970818][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.995306][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.020492][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.087995][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.102385][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.113424][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.203132][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.238842][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.279687][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.301884][ T2439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.327338][ T2439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.347607][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.944797][ T3555] Bluetooth: hci1: command tx timeout [ 55.954103][ T3558] Bluetooth: hci0: command tx timeout [ 55.956146][ T3562] Bluetooth: hci3: command tx timeout [ 55.959507][ T3558] Bluetooth: hci4: command tx timeout [ 55.959554][ T3555] Bluetooth: hci2: command tx timeout [ 61.346423][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 61.416794][ T3816] Zero length message leads to an empty skb [ 62.687379][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 62.950295][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 63.175628][ T3868] loop3: detected capacity change from 0 to 512 [ 63.243127][ T3537] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.448313][ T3876] loop3: detected capacity change from 0 to 256 [ 63.633368][ T3876] syz.3.82: attempt to access beyond end of device [ 63.633368][ T3876] loop3: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 64.242791][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.310761][ T3899] MPTCP: kernel_bind error, err=-98 [ 64.774827][ T3885] loop4: detected capacity change from 0 to 40427 [ 64.841214][ T3885] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 64.871828][ T3885] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 64.911629][ T3885] F2FS-fs (loop4): invalid crc value [ 64.971168][ T3885] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.095022][ T3885] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 65.102393][ T3885] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.203578][ T3885] ======================================================= [ 65.203578][ T3885] WARNING: The mand mount option has been deprecated and [ 65.203578][ T3885] and is ignored by this kernel. Remove the mand [ 65.203578][ T3885] option from the mount to silence this warning. [ 65.203578][ T3885] ======================================================= [ 65.364531][ T46] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 65.405433][ T46] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 66.274174][ T26] audit: type=1326 audit(1719780352.791:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3959 comm="syz.1.112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56d8975b99 code=0x0 [ 67.110514][ T3988] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.273415][ T3991] loop1: detected capacity change from 0 to 40427 [ 68.328317][ T3991] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 68.357518][ T3991] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 68.388843][ T3991] F2FS-fs (loop1): invalid crc value [ 68.446771][ T3991] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.456016][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 68.505718][ T4027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.603964][ T3991] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 68.611044][ T3991] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 68.625542][ T3562] Bluetooth: hci1: unexpected event 0x3e length: 537 > 260 [ 68.625575][ T3562] Bluetooth: hci1: unexpected subevent 0x0d length: 536 > 260 [ 68.644062][ T3562] Bluetooth: hci1: adv larger than maximum supported [ 68.775904][ T3991] syz.1.121: attempt to access beyond end of device [ 68.775904][ T3991] loop1: rw=2051, sector=40960, nr_sectors = 4096 limit=40427 [ 68.832653][ T120] block nbd0: Attempted send on invalid socket [ 68.839765][ T120] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.844204][ T3991] syz.1.121: attempt to access beyond end of device [ 68.844204][ T3991] loop1: rw=2051, sector=49152, nr_sectors = 81920 limit=40427 [ 68.864083][ T4040] hpfs: hpfs_map_sector(): read error [ 68.870589][ T3991] F2FS-fs (loop1): Issue discard(5120, 5120, 512) failed, ret: -5 [ 68.870628][ T3991] F2FS-fs (loop1): Issue discard(6144, 6144, 10240) failed, ret: -5 [ 68.922183][ T4050] loop2: detected capacity change from 0 to 64 [ 68.939263][ T4050] hfs: unable to parse mount options [ 69.497076][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 69.543983][ T120] block nbd1: Attempted send on invalid socket [ 69.550343][ T120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 69.617943][ T4073] netlink: 56 bytes leftover after parsing attributes in process `syz.1.153'. [ 70.055766][ T4050] loop2: detected capacity change from 0 to 32768 [ 70.101416][ T4050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.143 (4050) [ 70.187934][ T4050] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.221340][ T4050] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 70.257406][ T4050] BTRFS info (device loop2): using free space tree [ 70.636977][ T4050] BTRFS info (device loop2): enabling ssd optimizations [ 70.872570][ T4082] loop1: detected capacity change from 0 to 40427 [ 70.928560][ T4082] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 70.946574][ T4082] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 70.955411][ T3546] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.975365][ T4082] F2FS-fs (loop1): invalid crc value [ 71.062500][ T4082] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.278021][ T4082] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 71.290536][ T4140] netlink: 56 bytes leftover after parsing attributes in process `syz.3.165'. [ 71.307139][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.314186][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.323820][ T4082] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 71.503652][ T4082] syz.1.156: attempt to access beyond end of device [ 71.503652][ T4082] loop1: rw=2051, sector=40960, nr_sectors = 4096 limit=40427 [ 71.606409][ T4082] syz.1.156: attempt to access beyond end of device [ 71.606409][ T4082] loop1: rw=2051, sector=49152, nr_sectors = 81920 limit=40427 [ 71.693991][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 71.748092][ T4082] F2FS-fs (loop1): Issue discard(5120, 5120, 512) failed, ret: -5 [ 71.748135][ T4082] F2FS-fs (loop1): Issue discard(6144, 6144, 10240) failed, ret: -5 [ 72.424820][ T4172] netlink: 56 bytes leftover after parsing attributes in process `syz.3.177'. [ 72.592798][ T4175] kvm: emulating exchange as write [ 73.458686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.474334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 73.560839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.663233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.966841][ T4188] loop1: detected capacity change from 0 to 40427 [ 73.978919][ T4212] loop0: detected capacity change from 0 to 512 [ 73.989533][ T4218] netlink: 56 bytes leftover after parsing attributes in process `syz.3.193'. [ 74.011997][ T4188] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 74.014556][ T4212] EXT4-fs: Ignoring removed i_version option [ 74.045895][ T4188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 74.090320][ T4188] F2FS-fs (loop1): invalid crc value [ 74.133809][ T4188] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.140418][ T4212] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 74.250443][ T4188] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 74.263990][ T4188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 74.375575][ T4188] syz.1.182: attempt to access beyond end of device [ 74.375575][ T4188] loop1: rw=2051, sector=40960, nr_sectors = 4096 limit=40427 [ 74.395746][ T4188] syz.1.182: attempt to access beyond end of device [ 74.395746][ T4188] loop1: rw=2051, sector=49152, nr_sectors = 81920 limit=40427 [ 74.415984][ T4188] F2FS-fs (loop1): Issue discard(5120, 5120, 512) failed, ret: -5 [ 74.416032][ T4188] F2FS-fs (loop1): Issue discard(6144, 6144, 10240) failed, ret: -5 [ 75.779336][ T4258] netlink: 56 bytes leftover after parsing attributes in process `syz.4.207'. [ 76.428714][ T14] cfg80211: failed to load regulatory.db [ 76.632985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.789323][ T4279] loop2: detected capacity change from 0 to 16 [ 76.875213][ T4279] erofs: (device loop2): mounted with root inode @ nid 36. [ 77.310425][ T3555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.321272][ T3555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.341311][ T3555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.344134][ T4289] netlink: 56 bytes leftover after parsing attributes in process `syz.3.220'. [ 77.361161][ T3555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.369654][ T3555] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.377259][ T3555] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.899348][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 78.109803][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.122085][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.150264][ T4284] device bridge_slave_0 entered promiscuous mode [ 78.183292][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.192696][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.211916][ T4284] device bridge_slave_1 entered promiscuous mode [ 78.327426][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.365885][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.461452][ T4284] team0: Port device team_slave_0 added [ 78.488214][ T4284] team0: Port device team_slave_1 added [ 78.604189][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.614865][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.750925][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.761640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 78.815165][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.830885][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.873958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.944978][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.005252][ T4327] netlink: 32 bytes leftover after parsing attributes in process `syz.3.232'. [ 79.118041][ T4284] device hsr_slave_0 entered promiscuous mode [ 79.165488][ T4284] device hsr_slave_1 entered promiscuous mode [ 79.187109][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.219746][ T4284] Cannot create hsr debugfs directory [ 79.474347][ T3562] Bluetooth: hci2: command tx timeout [ 79.710083][ T4284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.739218][ T4312] loop0: detected capacity change from 0 to 40427 [ 79.800764][ T4312] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 79.838592][ T4312] F2FS-fs (loop0): invalid crc value [ 79.852593][ T4284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.852680][ T4312] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.005671][ T4312] F2FS-fs (loop0): recover fsync data on readonly fs [ 80.040741][ T4312] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 80.059431][ T4284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.068885][ T4312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.204908][ T4284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.215890][ T4312] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 80.227461][ T4312] F2FS-fs (loop0): switch extent_cache option is not allowed [ 80.236233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 80.244462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!! [ 80.253739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!! [ 81.254619][ T4343] netlink: 48 bytes leftover after parsing attributes in process `syz.3.238'. [ 81.519823][ T4284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.547265][ T3562] Bluetooth: hci2: command tx timeout [ 81.592957][ T4284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.682141][ T4284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.730955][ T4284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.976437][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.999952][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.030312][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.063514][ T4358] loop0: detected capacity change from 0 to 512 [ 82.080003][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.130127][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.143077][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.164053][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.171286][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.196691][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.206921][ T4358] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.240: casefold flag without casefold feature [ 82.217977][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.227738][ T4358] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.240: casefold flag without casefold feature [ 82.240492][ T4358] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.240: ea_inode with extended attributes [ 82.242467][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.261944][ T4358] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.240: error while reading EA inode 12 err=-117 [ 82.274238][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.275072][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.294428][ T4358] EXT4-fs (loop0): 1 orphan inode deleted [ 82.300211][ T4358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.352196][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.380563][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.390442][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.399812][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.431951][ T4284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.442999][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.481337][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.489878][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.499021][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.507960][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.517045][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.525758][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.534576][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.546009][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.550381][ T3545] EXT4-fs (loop0): unmounting filesystem. [ 82.617136][ T4368] loop3: detected capacity change from 0 to 128 [ 82.670142][ T4368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.724405][ T4368] ext4 filesystem being mounted at /root/syzkaller.U7ghwr/76/mnt supports timestamps until 2038 (0x7fffffff) [ 82.924787][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.933564][ T4381] kAFS: No cell specified [ 82.938868][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.962827][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.993250][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 83.059725][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.075081][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.161235][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.174907][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.211496][ T4284] device veth0_vlan entered promiscuous mode [ 83.219021][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 83.240595][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.251744][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.319632][ T4284] device veth1_vlan entered promiscuous mode [ 83.437332][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.447542][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.498615][ T4284] device veth0_macvtap entered promiscuous mode [ 83.570202][ T4284] device veth1_macvtap entered promiscuous mode [ 83.624296][ T3562] Bluetooth: hci2: command tx timeout [ 83.642000][ T3548] EXT4-fs (loop3): unmounting filesystem. [ 83.646008][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.660163][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.670916][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.682146][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.693185][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.705596][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.716476][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.727818][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.759356][ T4396] netlink: 19 bytes leftover after parsing attributes in process `syz.2.256'. [ 83.807638][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.826986][ T4397] netlink: 'syz.2.256': attribute type 2 has an invalid length. [ 83.828479][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.849644][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.863243][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.874045][ T4397] netlink: 244 bytes leftover after parsing attributes in process `syz.2.256'. [ 83.882722][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.886674][ T4377] loop0: detected capacity change from 0 to 40427 [ 83.900540][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.916375][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.930656][ T4377] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 83.999151][ T4377] F2FS-fs (loop0): invalid crc value [ 84.001814][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.030434][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.048761][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.062180][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.078497][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.089391][ T4377] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.092629][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.095981][ T4399] loop4: detected capacity change from 0 to 1024 [ 84.120708][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.136245][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.146503][ T3562] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 84.162289][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.173548][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.239052][ T4377] F2FS-fs (loop0): recover fsync data on readonly fs [ 84.259964][ T4377] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 84.277015][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.280146][ T4402] loop3: detected capacity change from 0 to 256 [ 84.305434][ T4377] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.374159][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.405735][ T4377] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 84.414758][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.429876][ T4377] F2FS-fs (loop0): switch extent_cache option is not allowed [ 84.452878][ T4284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.485262][ T4284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.533890][ T4284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.593325][ T4284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.625815][ T4403] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 85.075483][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.104396][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.116779][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.125768][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.156373][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.176903][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.708028][ T3562] Bluetooth: hci2: command tx timeout [ 85.932724][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 87.237840][ T3555] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 87.272927][ T4446] loop2: detected capacity change from 0 to 1024 [ 88.034055][ T3555] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 88.042711][ T3555] Bluetooth: hci1: Injecting HCI hardware error event [ 88.051556][ T3555] Bluetooth: hci1: hardware error 0x00 [ 88.265409][ T4453] loop4: detected capacity change from 0 to 256 [ 88.793559][ T4462] process 'syz.0.276' launched './file1' with NULL argv: empty string added [ 89.441046][ T4451] loop3: detected capacity change from 0 to 32768 [ 89.595990][ T4471] Device name cannot be null; rc = [-22] [ 90.264054][ T3555] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 90.883967][ T4492] netlink: 48 bytes leftover after parsing attributes in process `syz.1.283'. [ 91.957470][ T4522] loop2: detected capacity change from 0 to 256 [ 93.643999][ T3591] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.002214][ T4528] loop4: detected capacity change from 0 to 40427 [ 94.010659][ T3591] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.024190][ T3591] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.066252][ T4528] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 94.084418][ T4528] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.104926][ T4528] F2FS-fs (loop4): invalid crc value [ 94.113580][ T4528] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.123855][ T3591] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.132928][ T3591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.161800][ T3591] usb 2-1: SerialNumber: syz [ 94.258751][ T4528] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 94.275858][ T4528] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.580467][ T3591] usb 2-1: 0:2 : does not exist [ 94.803611][ T3627] usb 2-1: USB disconnect, device number 2 [ 94.855555][ T3537] udevd[3537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.170166][ T4567] loop2: detected capacity change from 0 to 736 [ 99.062213][ T4646] mmap: syz.0.329 (4646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.074780][ T3562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.084457][ T3562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.094071][ T3562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.102620][ T3562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.110665][ T3562] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.119611][ T3562] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.420122][ T4635] loop2: detected capacity change from 0 to 40427 [ 99.510016][ T4635] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 99.556667][ T4635] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.594666][ T4635] F2FS-fs (loop2): invalid crc value [ 99.698805][ T4635] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.809659][ T4660] chnl_net:caif_netlink_parms(): no params data found [ 99.855654][ T4635] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 99.874038][ T4635] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.006083][ T4676] ALSA: seq fatal error: cannot create timer (-22) [ 100.281301][ T4660] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.309035][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.111144][ T4660] device bridge_slave_0 entered promiscuous mode [ 101.163349][ T3562] Bluetooth: hci5: command tx timeout [ 101.272296][ T4660] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.294898][ T4660] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.317716][ T4660] device bridge_slave_1 entered promiscuous mode [ 101.358810][ T4660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.376593][ T4660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.439760][ T4660] team0: Port device team_slave_0 added [ 101.488827][ T4660] team0: Port device team_slave_1 added [ 101.634854][ T4660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.641834][ T4660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.728146][ T4660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.790170][ T4660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.823938][ T4660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.907675][ T4660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.710292][ T4660] device hsr_slave_0 entered promiscuous mode [ 102.735930][ T4660] device hsr_slave_1 entered promiscuous mode [ 102.749131][ T4660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.767679][ T4660] Cannot create hsr debugfs directory [ 103.223847][ T3562] Bluetooth: hci5: command tx timeout [ 103.309024][ T4660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.451674][ T4660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.606366][ T4660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.959548][ T4725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.341'. [ 104.060956][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 104.142278][ T4660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.481480][ T4660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.515660][ T4660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.536466][ T4660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.563354][ T4660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.814108][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.852525][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.873589][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.916629][ T4660] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.949357][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.963087][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.983380][ T4136] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.990572][ T4136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.074881][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.109677][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.121479][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.138146][ T4136] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.145327][ T4136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.162612][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.215171][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.283104][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.296492][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.305093][ T3562] Bluetooth: hci5: command tx timeout [ 105.322851][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.336590][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.352339][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.367299][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.379586][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.398882][ T4747] program syz.1.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.492990][ T4660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.821675][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.865011][ T3624] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.930498][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.939833][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.984062][ T3590] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.128088][ T3624] usb 3-1: Using ep0 maxpacket: 8 [ 106.246379][ T3624] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.294364][ T3624] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.329057][ T3624] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 106.342120][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.352455][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.360973][ T3624] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 106.368220][ T4660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.392840][ T3624] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 106.410881][ T3624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.455487][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.467948][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.477437][ T3624] hub 3-1:1.0: bad descriptor, ignoring hub [ 106.492063][ T4660] device veth0_vlan entered promiscuous mode [ 106.493148][ T3624] hub: probe of 3-1:1.0 failed with error -5 [ 106.501764][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.514047][ T3590] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=36.e7 [ 106.517711][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.523090][ T3590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.523136][ T3590] usb 2-1: Product: syz [ 106.523152][ T3590] usb 2-1: Manufacturer: syz [ 106.546685][ T4660] device veth1_vlan entered promiscuous mode [ 106.554245][ T3624] cdc_wdm 3-1:1.0: skipping garbage [ 106.563582][ T3624] cdc_wdm 3-1:1.0: skipping garbage [ 106.564914][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.577968][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.587015][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.610776][ T3624] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 106.634243][ T3624] cdc_wdm 3-1:1.0: Unknown control protocol [ 106.644412][ T3590] usb 2-1: SerialNumber: syz [ 106.705619][ T3624] usb 3-1: USB disconnect, device number 2 [ 106.724738][ T3590] usb 2-1: config 0 descriptor?? [ 106.779850][ T3590] hub 2-1:0.0: bad descriptor, ignoring hub [ 106.812370][ T3590] hub: probe of 2-1:0.0 failed with error -5 [ 106.815039][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.837388][ T3590] mct_u232 2-1:0.0: MCT U232 converter detected [ 106.924811][ T3590] mct_u232 ttyUSB0: expected endpoint missing [ 107.383936][ T3562] Bluetooth: hci5: command tx timeout [ 107.414773][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.434117][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.449639][ T4660] device veth0_macvtap entered promiscuous mode [ 107.471420][ T4660] device veth1_macvtap entered promiscuous mode [ 107.494474][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.507232][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.517933][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.540200][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.567311][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.589205][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.602005][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.623323][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.641665][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.652942][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.664212][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.674966][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.688905][ T4660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.698888][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.714157][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.730880][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.742299][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.765925][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.776778][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.789479][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.800899][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.811593][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.822479][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.833588][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.846702][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.900272][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.923487][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.946189][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.983349][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.015100][ T4660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.141897][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.160979][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.183573][ T4660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.201012][ T4660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.233964][ T3624] usb 2-1: USB disconnect, device number 3 [ 108.252347][ T4660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.253869][ T3624] mct_u232 2-1:0.0: device disconnected [ 108.272705][ T4660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.421492][ T4690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.449602][ T4690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.511435][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.542912][ T4690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.573338][ T4690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.589894][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.270846][ T3627] kernel read not supported for file /usbmon2 (pid: 3627 comm: kworker/1:7) [ 109.794330][ T26] audit: type=1326 audit(1719780399.322:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.3.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd187975b99 code=0x0 [ 109.908893][ T4801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 112.319709][ T4831] syz.1.378 (pid 4831) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 112.404033][ T26] audit: type=1326 audit(1719780401.932:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd187975b99 code=0x0 [ 113.017781][ T4833] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 113.049043][ T26] audit: type=1800 audit(1719780402.572:5): pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.378" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 113.130121][ T26] audit: type=1326 audit(1719780402.642:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.4.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff281d75b99 code=0x0 [ 115.990164][ T4893] program syz.2.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.283919][ T3590] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.854037][ T3590] usb 3-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=36.e7 [ 116.871213][ T3590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.881020][ T3590] usb 3-1: Product: syz [ 116.897924][ T3590] usb 3-1: Manufacturer: syz [ 116.903244][ T3590] usb 3-1: SerialNumber: syz [ 116.955191][ T3590] usb 3-1: config 0 descriptor?? [ 117.007048][ T3590] hub 3-1:0.0: bad descriptor, ignoring hub [ 117.021984][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 117.034539][ T3590] hub: probe of 3-1:0.0 failed with error -5 [ 117.082727][ T3590] mct_u232 3-1:0.0: MCT U232 converter detected [ 117.124512][ T3590] mct_u232 ttyUSB0: expected endpoint missing [ 117.716030][ T26] audit: type=1326 audit(1719780407.232:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.0.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4d75b99 code=0x0 [ 118.855771][ T3550] usb 3-1: USB disconnect, device number 3 [ 118.862548][ T3550] mct_u232 3-1:0.0: device disconnected [ 119.236437][ T4935] overlayfs: failed to resolve './file0': -2 [ 119.754952][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 120.707638][ T26] audit: type=1326 audit(1719780411.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="syz.3.413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd187975b99 code=0x0 [ 120.863325][ T4969] loop1: detected capacity change from 0 to 64 [ 120.900886][ T4969] hfs: unable to parse mount options [ 121.295443][ T4978] syz.2.417 uses obsolete (PF_INET,SOCK_PACKET) [ 122.221051][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 122.576596][ T3555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.628988][ T4969] loop1: detected capacity change from 0 to 32768 [ 122.650450][ T3555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.660601][ T3555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.679813][ T3555] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.689577][ T3555] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 122.698522][ T3555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.846043][ T4969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.415 (4969) [ 123.231443][ T4969] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.281138][ T4969] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 123.293894][ T4969] BTRFS info (device loop1): using free space tree [ 123.460077][ T4989] chnl_net:caif_netlink_parms(): no params data found [ 123.532374][ T4969] BTRFS info (device loop1): enabling ssd optimizations [ 123.816415][ T4989] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.841409][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.865398][ T4989] device bridge_slave_0 entered promiscuous mode [ 123.907655][ T4989] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.942271][ T4989] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.960819][ T4989] device bridge_slave_1 entered promiscuous mode [ 123.987102][ T4284] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.074054][ T4989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.110984][ T4989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.306515][ T4989] team0: Port device team_slave_0 added [ 124.324926][ T4989] team0: Port device team_slave_1 added [ 124.412323][ T4989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.430693][ T4989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.530690][ T4989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.590032][ T4989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.613922][ T4989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.658998][ T4989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.984109][ T3562] Bluetooth: hci4: command tx timeout [ 125.029093][ T4989] device hsr_slave_0 entered promiscuous mode [ 125.104414][ T4989] device hsr_slave_1 entered promiscuous mode [ 125.143933][ T4989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.151532][ T4989] Cannot create hsr debugfs directory [ 125.499991][ T5057] random: crng reseeded on system resumption [ 125.517669][ T5058] loop1: detected capacity change from 0 to 1024 [ 125.550265][ T5058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.658482][ T4989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.674567][ T5058] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.747641][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 125.836029][ T4989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.964066][ T4989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.075232][ T4989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.073823][ T3555] Bluetooth: hci4: command tx timeout [ 127.139756][ T4989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.150261][ T4989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.162206][ T4989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.185304][ T4989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.412202][ T4989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.461403][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.470477][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.491427][ T4989] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.519984][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.551074][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.578769][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.585945][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.648296][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.673214][ T5091] loop2: detected capacity change from 0 to 2048 [ 127.679834][ T3590] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.698901][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.751798][ T5091] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096) [ 127.795813][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.815753][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.822983][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.007472][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.074711][ T3590] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.175169][ T3590] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 128.386556][ T3590] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 128.514932][ T4989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.571137][ T4989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.624054][ T3590] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 128.635440][ T3590] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 128.644471][ T3590] usb 4-1: Manufacturer: syz [ 128.652098][ T3590] usb 4-1: config 0 descriptor?? [ 128.696575][ T3590] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 128.782158][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.792085][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.804270][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.813381][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.821750][ T4134] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.153835][ T3555] Bluetooth: hci4: command tx timeout [ 129.373284][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.382303][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.392360][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.401272][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.410065][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.420676][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.454700][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.624587][ T4134] usb 2-1: Using ep0 maxpacket: 8 [ 129.748859][ T4134] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 129.803810][ T4134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.830411][ T4134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.856449][ T4134] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.881093][ T4134] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.899931][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.000140][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.015990][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.039129][ T4989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.193941][ T4134] usb 2-1: usb_control_msg returned -32 [ 130.204247][ T4134] usbtmc 2-1:16.0: can't read capabilities [ 130.553829][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 130.579809][ T5133] usbtmc 2-1:16.0: Unable to send data, error -71 [ 130.767610][ T5137] 9pnet_virtio: no channels available for device syz [ 130.952110][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.967649][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.005199][ T4134] usb 4-1: USB disconnect, device number 2 [ 131.019504][ T4989] device veth0_vlan entered promiscuous mode [ 131.050771][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.061548][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.089269][ T4989] device veth1_vlan entered promiscuous mode [ 131.115393][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.133292][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.197750][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.209542][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.223941][ T3555] Bluetooth: hci4: command tx timeout [ 131.229733][ T4989] device veth0_macvtap entered promiscuous mode [ 131.267493][ T4989] device veth1_macvtap entered promiscuous mode [ 131.294791][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.306847][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.318762][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.330191][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.341336][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.352762][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.367970][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.380272][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.595926][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.610624][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.858857][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.083959][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.316125][ T5037] usb 2-1: USB disconnect, device number 4 [ 132.322654][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.425527][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.485367][ T4989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.501984][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.512590][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.523330][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.532341][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.561600][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.585286][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.595905][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.606711][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.618370][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.632284][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.668252][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.680557][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.720423][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.731897][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.745400][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.751875][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.788599][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.809474][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.850144][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.923895][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.972822][ T4989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.993976][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.004612][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.046480][ T4989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.064093][ T4989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.073180][ T4989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.131384][ T4989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.223952][ T4134] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.338704][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.384505][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.446795][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.469823][ T4615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.525843][ T4615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.594194][ T4134] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.617801][ T4134] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.644900][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.660763][ T4134] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.694193][ T4134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.847594][ T5165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.289693][ T5185] sched: RT throttling activated [ 136.181055][ T5037] usb 4-1: USB disconnect, device number 3 [ 137.084179][ T4134] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.464294][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.720775][ T5038] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.260031][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.271322][ T4134] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.281042][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.299310][ T4134] usb 2-1: config 0 descriptor?? [ 138.347621][ T5038] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.377852][ T5038] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.434183][ T5038] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.456082][ T5038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.494127][ T5224] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 142.006041][ T5038] usb 4-1: USB disconnect, device number 4 [ 142.083936][ T4134] usb 2-1: string descriptor 0 read error: -71 [ 142.105898][ T4134] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 142.121081][ T4134] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 142.153813][ T4134] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 142.203820][ T4134] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 142.211348][ T4134] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 142.244359][ T4134] usb 2-1: USB disconnect, device number 5 [ 143.007051][ T5260] Bluetooth: MGMT ver 1.22 [ 143.245538][ T5247] overlayfs: failed to resolve './file1': -2 [ 143.293827][ T3594] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.509300][ T3594] usb 4-1: device descriptor read/64, error -71 [ 143.744102][ T5038] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.506860][ T3594] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.955011][ T3594] usb 4-1: device descriptor read/64, error -71 [ 145.082378][ T3594] usb usb4-port1: attempt power cycle [ 145.553998][ T3594] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.747104][ T3594] usb 4-1: device descriptor read/8, error -71 [ 146.310256][ T3594] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.103827][ T3594] usb 4-1: device descriptor read/8, error -71 [ 147.121107][ T5038] usb 2-1: unable to read config index 0 descriptor/all [ 147.128436][ T5038] usb 2-1: can't read configurations, error -71 [ 147.224066][ T3594] usb usb4-port1: unable to enumerate USB device [ 147.577873][ T5297] loop4: detected capacity change from 0 to 1024 [ 148.118404][ T5292] loop2: detected capacity change from 0 to 32768 [ 148.186354][ T5292] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.508 (5292) [ 148.244472][ T5292] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.275930][ T5292] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 148.309780][ T5292] BTRFS info (device loop2): using free space tree [ 148.471140][ T5292] BTRFS info (device loop2): enabling ssd optimizations [ 148.749412][ T3546] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.774297][ T3594] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.077701][ T5304] overlayfs: failed to resolve './file1': -2 [ 149.134295][ T3594] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.145669][ T3594] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.170062][ T3594] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.184356][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.192547][ T3627] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 149.226815][ T5334] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.403796][ T3627] usb 5-1: device descriptor read/64, error -71 [ 149.694028][ T3627] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.943790][ T3627] usb 5-1: device descriptor read/64, error -71 [ 150.064310][ T3627] usb usb5-port1: attempt power cycle [ 150.145142][ T5365] loop1: detected capacity change from 0 to 1024 [ 150.484022][ T3627] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.614025][ T3627] usb 5-1: device descriptor read/8, error -71 [ 150.729421][ T5378] loop2: detected capacity change from 0 to 64 [ 150.774062][ T5378] hfs: unable to parse mount options [ 150.883873][ T3627] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.974343][ T3627] usb 5-1: device descriptor read/8, error -71 [ 151.093971][ T3627] usb usb5-port1: unable to enumerate USB device [ 151.516062][ T5378] loop2: detected capacity change from 0 to 32768 [ 151.556301][ T5378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.532 (5378) [ 151.609149][ T5378] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.609503][ T3594] usb 4-1: USB disconnect, device number 9 [ 151.642945][ T5378] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 151.672867][ T5378] BTRFS info (device loop2): using free space tree [ 151.943593][ T5378] BTRFS info (device loop2): enabling ssd optimizations [ 152.149454][ T5378] overlayfs: failed to resolve './file0': -2 [ 152.416199][ T3546] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.533071][ T5443] loop4: detected capacity change from 0 to 64 [ 153.589669][ T5443] hfs: unable to parse mount options [ 155.162150][ T5443] loop4: detected capacity change from 0 to 32768 [ 155.207346][ T5443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.550 (5443) [ 155.239542][ T5443] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.250530][ T5443] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 155.271244][ T5443] BTRFS info (device loop4): using free space tree [ 155.416057][ T2534] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.529383][ T5443] BTRFS info (device loop4): enabling ssd optimizations [ 155.661884][ T5443] overlayfs: failed to resolve './file0': -2 [ 155.813840][ T2534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.832513][ T2534] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.860603][ T2534] usb 4-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 155.899147][ T2534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.944289][ T4989] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.964144][ T2534] usb 4-1: config 0 descriptor?? [ 156.029826][ T2534] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 156.314007][ T3591] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.504059][ T3591] usb 2-1: device descriptor read/64, error -71 [ 156.773930][ T3591] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.909834][ T14] usb 4-1: USB disconnect, device number 10 [ 156.973912][ T3591] usb 2-1: device descriptor read/64, error -71 [ 157.094442][ T3591] usb usb2-port1: attempt power cycle [ 157.504359][ T3591] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.993806][ T3591] usb 2-1: device descriptor read/8, error -71 [ 163.033803][ T153] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 163.123773][ T5341] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.323930][ T3591] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 163.413921][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.438247][ T153] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.484333][ T5341] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.498398][ T153] usb 4-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 163.512601][ T5341] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.523096][ T3591] usb 2-1: device descriptor read/64, error -71 [ 163.549965][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.563179][ T5341] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.591924][ T153] usb 4-1: config 0 descriptor?? [ 163.600817][ T5341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.695111][ T153] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 164.484098][ T5572] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 164.513825][ T3591] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 164.585673][ T5575] overlayfs: failed to resolve './file1': -2 [ 164.737377][ T3591] usb 2-1: device descriptor read/64, error -71 [ 164.819934][ T5588] netlink: 56 bytes leftover after parsing attributes in process `syz.2.595'. [ 164.863984][ T3591] usb usb2-port1: attempt power cycle [ 165.283973][ T3591] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 165.375222][ T5341] usb 4-1: USB disconnect, device number 11 [ 165.384239][ T3591] usb 2-1: device descriptor read/8, error -71 [ 165.740758][ T3596] usb 5-1: USB disconnect, device number 6 [ 165.835279][ T3591] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 166.183822][ T3591] usb 2-1: device descriptor read/8, error -71 [ 166.304094][ T3591] usb usb2-port1: unable to enumerate USB device [ 166.554492][ T5608] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.602'. [ 166.979511][ T5621] netlink: 56 bytes leftover after parsing attributes in process `syz.2.607'. [ 167.083754][ T3596] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 167.333767][ T3596] usb 2-1: Using ep0 maxpacket: 8 [ 167.624150][ T3596] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 167.642992][ T3596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.662372][ T3596] usb 2-1: Product: syz [ 167.690582][ T3596] usb 2-1: Manufacturer: syz [ 167.720506][ T3596] usb 2-1: SerialNumber: syz [ 167.752950][ T3596] usb 2-1: config 0 descriptor?? [ 168.064890][ T3596] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 168.072633][ T2534] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.089903][ T3596] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 168.143989][ T3596] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 168.151497][ T3596] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 168.191466][ T3596] usb 2-1: USB disconnect, device number 16 [ 168.230841][ T5619] overlayfs: failed to resolve './file1': -2 [ 168.443975][ T5341] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.483852][ T2534] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.501918][ T2534] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 168.531609][ T2534] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 168.545319][ T2534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.562412][ T2534] usb 5-1: config 0 descriptor?? [ 168.762403][ T5646] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.616'. [ 168.813991][ T5341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.843918][ T5341] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.866836][ T5341] usb 3-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 168.876864][ T5341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.910515][ T5341] usb 3-1: config 0 descriptor?? [ 168.950276][ T5651] netlink: 56 bytes leftover after parsing attributes in process `syz.0.618'. [ 168.958155][ T5341] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 169.764194][ T3590] usb 3-1: USB disconnect, device number 4 [ 170.592435][ T5664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.605382][ T5664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.663928][ T3562] Bluetooth: hci3: command 0x0406 tx timeout [ 170.741833][ T5664] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 170.748769][ T5664] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 170.760169][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.784253][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.826200][ T5664] vhci_hcd vhci_hcd.0: Device attached [ 171.023803][ T5341] vhci_hcd: vhci_device speed not set [ 171.093887][ T5341] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 171.336846][ T5689] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.630'. [ 171.485831][ T5692] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 172.180032][ T5676] vhci_hcd: connection reset by peer [ 172.216811][ T4613] vhci_hcd: stop threads [ 172.232255][ T4613] vhci_hcd: release socket [ 172.241861][ T4613] vhci_hcd: disconnect device [ 172.289131][ T3590] usb 5-1: USB disconnect, device number 7 [ 172.630424][ T2534] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.054133][ T2534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.081070][ T2534] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.144330][ T2534] usb 4-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 173.188692][ T2534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.277899][ T2534] usb 4-1: config 0 descriptor?? [ 173.362287][ T2534] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 173.764215][ T5729] netlink: 56 bytes leftover after parsing attributes in process `syz.2.645'. [ 173.781725][ T5728] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.644'. [ 173.833935][ T3624] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 174.073884][ T3624] usb 2-1: Using ep0 maxpacket: 8 [ 174.248086][ T3590] usb 4-1: USB disconnect, device number 12 [ 174.353826][ T3624] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 174.362913][ T3624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.390155][ T3624] usb 2-1: Product: syz [ 174.403876][ T3624] usb 2-1: Manufacturer: syz [ 174.408508][ T3624] usb 2-1: SerialNumber: syz [ 174.435217][ T3624] usb 2-1: config 0 descriptor?? [ 175.325247][ T3624] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 175.334911][ T3624] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 175.394927][ T3624] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 175.401358][ T3624] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 175.421599][ T3624] usb 2-1: USB disconnect, device number 17 [ 176.288313][ T5341] vhci_hcd: vhci_device speed not set [ 176.719782][ T5761] netlink: 56 bytes leftover after parsing attributes in process `syz.2.657'. [ 178.803916][ T5341] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.344429][ T5341] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.364199][ T5341] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.375723][ T3624] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 179.419805][ T5341] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.455420][ T5341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.514246][ T5787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.643469][ T5806] netlink: 56 bytes leftover after parsing attributes in process `syz.0.672'. [ 179.733953][ T3624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.763772][ T3591] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 179.773038][ T3624] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.804187][ T3624] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 179.838693][ T3624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.875723][ T3624] usb 2-1: config 0 descriptor?? [ 179.917923][ T3624] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 180.003948][ T3591] usb 5-1: Using ep0 maxpacket: 8 [ 181.037256][ T3591] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 181.069172][ T3591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.103173][ T3591] usb 5-1: Product: syz [ 181.125865][ T3591] usb 5-1: Manufacturer: syz [ 181.140742][ T3591] usb 5-1: SerialNumber: syz [ 181.157835][ T3591] usb 5-1: config 0 descriptor?? [ 181.214831][ T3624] usb 2-1: USB disconnect, device number 18 [ 181.444203][ T3591] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 181.461383][ T3591] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 181.513872][ T3591] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 181.520316][ T3591] dvb_usb_af9035: probe of 5-1:0.0 failed with error -22 [ 181.556095][ T3591] usb 5-1: USB disconnect, device number 8 [ 181.763236][ T5835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.684'. [ 183.102368][ T14] usb 3-1: USB disconnect, device number 5 [ 183.763862][ T2534] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 183.800380][ T5871] netlink: 56 bytes leftover after parsing attributes in process `syz.4.696'. [ 184.173952][ T2534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.314868][ T2534] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.618155][ T2534] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 184.812694][ T2534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.938239][ T2534] usb 2-1: config 0 descriptor?? [ 184.991252][ T2534] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 185.214024][ T3596] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.237009][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 185.271190][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 185.309656][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 185.429826][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 185.458772][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 185.474309][ T3596] usb 4-1: Using ep0 maxpacket: 8 [ 185.515410][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 185.785154][ T3596] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 185.802263][ T3596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.823929][ T3596] usb 4-1: Product: syz [ 185.833928][ T3596] usb 4-1: Manufacturer: syz [ 185.845087][ T3596] usb 4-1: SerialNumber: syz [ 185.857114][ T3596] usb 4-1: config 0 descriptor?? [ 185.864312][ T5038] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.163547][ T5037] usb 2-1: USB disconnect, device number 19 [ 186.170936][ T3596] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 186.185403][ T3596] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 186.254217][ T3596] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 186.264212][ T3596] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22 [ 186.274179][ T5038] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.292505][ T5038] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.312937][ T3596] usb 4-1: USB disconnect, device number 13 [ 186.322217][ T5038] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.347849][ T5038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.384100][ T5893] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 186.505431][ T5903] netlink: 56 bytes leftover after parsing attributes in process `syz.0.708'. [ 188.124290][ T3596] usb 3-1: USB disconnect, device number 6 [ 189.059721][ T5939] netlink: 56 bytes leftover after parsing attributes in process `syz.0.719'. [ 189.523837][ T3596] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 189.553921][ T5038] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 189.803848][ T5038] usb 3-1: Using ep0 maxpacket: 8 [ 189.904131][ T3596] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.925449][ T3596] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.949047][ T3596] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 189.971973][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.992796][ T3596] usb 2-1: config 0 descriptor?? [ 190.036538][ T3596] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 190.094181][ T5038] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 190.106412][ T5038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.120292][ T5038] usb 3-1: Product: syz [ 190.128336][ T5038] usb 3-1: Manufacturer: syz [ 190.133416][ T5038] usb 3-1: SerialNumber: syz [ 190.144869][ T5038] usb 3-1: config 0 descriptor?? [ 191.154246][ T5038] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 191.161166][ T5038] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 191.176846][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.203969][ T5038] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 191.213888][ T5038] dvb_usb_af9035: probe of 3-1:0.0 failed with error -22 [ 191.233149][ T5038] usb 3-1: USB disconnect, device number 7 [ 191.235885][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.291463][ T5974] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 191.298030][ T5974] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.327440][ T5974] vhci_hcd vhci_hcd.0: Device attached [ 191.424709][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.465491][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.523920][ T3624] vhci_hcd: vhci_device speed not set [ 191.633420][ T3624] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 192.652852][ T5976] vhci_hcd: connection reset by peer [ 192.658742][ T102] vhci_hcd: stop threads [ 192.663267][ T102] vhci_hcd: release socket [ 192.705004][ T102] vhci_hcd: disconnect device [ 192.782263][ T5038] usb 2-1: USB disconnect, device number 20 [ 193.341012][ T3591] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.623920][ T3591] usb 3-1: Using ep0 maxpacket: 8 [ 194.084259][ T3591] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 194.126434][ T3591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.138497][ T3591] usb 3-1: Product: syz [ 194.142742][ T3591] usb 3-1: Manufacturer: syz [ 194.153262][ T3591] usb 3-1: SerialNumber: syz [ 194.169484][ T3591] usb 3-1: config 0 descriptor?? [ 194.193974][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.200278][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.104411][ T3591] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 195.111541][ T3591] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 195.163912][ T3591] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 195.187338][ T3591] dvb_usb_af9035: probe of 3-1:0.0 failed with error -22 [ 195.220426][ T3591] usb 3-1: USB disconnect, device number 8 [ 196.080213][ T3561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.090091][ T3561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.099315][ T3561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.109555][ T3561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.117652][ T3561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 196.126102][ T3561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.489247][ T6048] Bluetooth: MGMT ver 1.22 [ 196.695815][ T6037] chnl_net:caif_netlink_parms(): no params data found [ 196.745330][ T3624] vhci_hcd: vhci_device speed not set [ 196.843780][ T5341] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 196.886847][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.923291][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.973046][ T6037] device bridge_slave_0 entered promiscuous mode [ 196.999892][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.036062][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.085105][ T6037] device bridge_slave_1 entered promiscuous mode [ 197.158325][ T6037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.196577][ T6037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.203926][ T5341] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.233762][ T5341] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.299178][ T5341] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.325268][ T5341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.367430][ T6037] team0: Port device team_slave_0 added [ 197.384711][ T6052] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.393414][ T6037] team0: Port device team_slave_1 added [ 197.421516][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.429365][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.558520][ T6037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.590656][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.605362][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.636288][ T6037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.759578][ T6037] device hsr_slave_0 entered promiscuous mode [ 197.775812][ T6037] device hsr_slave_1 entered promiscuous mode [ 197.798065][ T6037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.803791][ T5341] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 197.819211][ T6037] Cannot create hsr debugfs directory [ 198.063930][ T5341] usb 4-1: Using ep0 maxpacket: 8 [ 198.183952][ T3555] Bluetooth: hci0: command tx timeout [ 198.192408][ T6037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.253865][ T5038] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 198.317020][ T6037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.344474][ T5341] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 198.369986][ T5341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.419180][ T5341] usb 4-1: Product: syz [ 198.435163][ T5341] usb 4-1: Manufacturer: syz [ 198.453430][ T5341] usb 4-1: SerialNumber: syz [ 198.595915][ T5341] usb 4-1: config 0 descriptor?? [ 198.698946][ T3596] usb 3-1: USB disconnect, device number 9 [ 198.779881][ T6037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.874234][ T5341] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 198.888195][ T5341] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 198.918838][ T6037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.930738][ T5038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.946858][ T5038] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.963932][ T5341] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 198.970349][ T5341] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22 [ 198.978529][ T5038] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 198.996490][ T5038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.005220][ T5341] usb 4-1: USB disconnect, device number 14 [ 199.025576][ T5038] usb 2-1: config 0 descriptor?? [ 199.076015][ T5038] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 199.258326][ T6037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.295473][ T6037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.330597][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 199.343505][ T6037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.364374][ T6037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.406330][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 199.469027][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 199.517568][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 199.797086][ T6037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.265126][ T3561] Bluetooth: hci0: command tx timeout [ 200.277277][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.314807][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.327263][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 200.348489][ T6037] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.390958][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.414948][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18 [ 200.415075][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.447818][ T5037] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.455047][ T5037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.491901][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.502128][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.512422][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.523338][ T5037] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.530542][ T5037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.539504][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.595596][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.605836][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.619768][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.629281][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.640201][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.649405][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.658468][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.674202][ T6037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.708808][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.720529][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.738988][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.762059][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.970950][ T5341] usb 2-1: USB disconnect, device number 21 [ 201.185725][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.204481][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.228841][ T6037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.278820][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.305026][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.371485][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.381479][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.393781][ T3561] Bluetooth: hci2: command 0x0406 tx timeout [ 201.413928][ T6037] device veth0_vlan entered promiscuous mode [ 201.427104][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.435583][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.456898][ T6037] device veth1_vlan entered promiscuous mode [ 202.775495][ T3561] Bluetooth: hci0: command tx timeout [ 202.783523][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.831709][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.891446][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.945104][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.970507][ T6037] device veth0_macvtap entered promiscuous mode [ 203.002307][ T6037] device veth1_macvtap entered promiscuous mode [ 203.065580][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.139099][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.163123][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.177778][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.188134][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.201119][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.228480][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.272673][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.293553][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.350947][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.374348][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.398516][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.410987][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.422355][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.433103][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.464889][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.501906][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.531157][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.541677][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.562729][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.579948][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.608520][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.619665][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.641049][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.653800][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.673796][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.684229][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.713505][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.735751][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.748325][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.773765][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.796543][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.808567][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.820177][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.831326][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.842954][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.864591][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.880741][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.906680][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.918016][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.929198][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.947331][ T6037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.971754][ T6037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.983951][ T14] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.001811][ T6037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.011319][ T14] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.027924][ T6037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.038194][ T14] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.051670][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.084930][ T6121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.254139][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.267852][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.301051][ T5238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.305616][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.311787][ T5238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.345945][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.177743][ T3555] Bluetooth: hci0: command tx timeout [ 206.589049][ T3624] usb 5-1: USB disconnect, device number 9 [ 207.813834][ T5341] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 208.186815][ T5341] usb 2-1: Using ep0 maxpacket: 8 [ 208.794101][ T5341] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 208.803212][ T5341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.822417][ T5341] usb 2-1: Product: syz [ 208.829035][ T5341] usb 2-1: Manufacturer: syz [ 208.842888][ T5341] usb 2-1: SerialNumber: syz [ 208.868883][ T5341] usb 2-1: config 0 descriptor?? [ 209.325454][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 209.375461][ T5341] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 209.394495][ T5341] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 209.449699][ T5341] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 209.460859][ T5341] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 209.665113][ T5341] usb 2-1: USB disconnect, device number 22 [ 209.785233][ T14] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.840563][ T14] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.861089][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.873838][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.924075][ T6198] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 211.369603][ T2534] usb 1-1: USB disconnect, device number 2 [ 216.533949][ T6248] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 216.934125][ T6248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.986004][ T6248] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.149969][ T6248] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 217.183750][ T6248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.223093][ T6248] usb 5-1: config 0 descriptor?? [ 217.285928][ T6248] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 219.110100][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.134083][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.178397][ T6278] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 219.184959][ T6278] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 219.224334][ T6278] vhci_hcd vhci_hcd.0: Device attached [ 219.291744][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.355257][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.425389][ T5340] vhci_hcd: vhci_device speed not set [ 219.439857][ T6293] syz_tun: mtu less than device minimum [ 219.503772][ T5340] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 219.570534][ T6296] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.833'. [ 220.756871][ T6286] vhci_hcd: connection reset by peer [ 221.114151][ T9] vhci_hcd: stop threads [ 221.118445][ T9] vhci_hcd: release socket [ 221.148745][ T9] vhci_hcd: disconnect device [ 221.249704][ T3624] usb 5-1: USB disconnect, device number 10 [ 223.780574][ T3561] Bluetooth: hci5: command 0x0406 tx timeout [ 224.678768][ T5340] vhci_hcd: vhci_device speed not set [ 225.876892][ T6341] syz_tun: mtu less than device minimum [ 225.877944][ T6343] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.846'. [ 235.472130][ T6386] syz_tun: mtu less than device minimum [ 240.643916][ T3550] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 240.963841][ T2534] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 241.034496][ T3550] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.050580][ T3550] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.062143][ T3550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.097299][ T3550] usb 1-1: config 0 descriptor?? [ 241.156143][ T3550] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 241.355902][ T2534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.378316][ T2534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.394858][ T2534] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.405159][ T2534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.420711][ T2534] usb 2-1: config 0 descriptor?? [ 243.850980][ T153] usb 1-1: USB disconnect, device number 3 [ 244.022325][ T2534] usbhid 2-1:0.0: can't add hid device: -71 [ 244.214843][ T2534] usbhid: probe of 2-1:0.0 failed with error -71 [ 244.233596][ T2534] usb 2-1: USB disconnect, device number 23 [ 245.700134][ T153] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 247.545996][ T153] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.589664][ T153] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.623800][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.633677][ T3555] Bluetooth: hci4: command 0x0406 tx timeout [ 247.668096][ T153] usb 1-1: config 0 descriptor?? [ 247.782815][ T153] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 248.771975][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.801191][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.832773][ T6560] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 248.839333][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 248.894269][ T6560] vhci_hcd vhci_hcd.0: Device attached [ 248.966693][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.033548][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.094310][ T153] vhci_hcd: vhci_device speed not set [ 249.170952][ T153] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 250.338721][ T6565] vhci_hcd: connection reset by peer [ 250.382109][ T4208] vhci_hcd: stop threads [ 250.387211][ T4208] vhci_hcd: release socket [ 250.412707][ T4208] vhci_hcd: disconnect device [ 250.483273][ T5038] usb 1-1: USB disconnect, device number 4 [ 250.504969][ T27] INFO: task kworker/u4:2:33 blocked for more than 143 seconds. [ 250.513530][ T27] Not tainted 6.1.96-syzkaller #0 [ 250.541803][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.558845][ T27] task:kworker/u4:2 state:D stack:23992 pid:33 ppid:2 flags:0x00004000 [ 250.583328][ T27] Workqueue: writeback wb_workfn (flush-7:3) [ 250.600863][ T27] Call Trace: [ 250.613662][ T27] [ 250.620187][ T27] __schedule+0x142d/0x4550 [ 250.637008][ T27] ? __sched_text_start+0x8/0x8 [ 250.650129][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 250.664479][ T27] ? blk_check_plugged+0x250/0x250 [ 250.669923][ T27] ? wq_worker_sleeping+0x5f/0x270 [ 250.677840][ T27] schedule+0xbf/0x180 [ 250.682310][ T27] schedule_preempt_disabled+0xf/0x20 [ 250.689236][ T27] __mutex_lock+0x6b9/0xd80 [ 250.703695][ T27] ? __mutex_lock+0x53c/0xd80 [ 250.710200][ T27] ? jfs_commit_inode+0x242/0x580 [ 250.716664][ T27] ? mutex_lock_nested+0x10/0x10 [ 250.721750][ T27] jfs_commit_inode+0x242/0x580 [ 250.759347][ T27] ? jfs_iget+0x3b0/0x3b0 [ 251.041036][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 251.239518][ T27] jfs_write_inode+0x13f/0x210 [ 251.392218][ T27] __writeback_single_inode+0x67d/0x11e0 [ 251.565750][ T27] writeback_sb_inodes+0xc2b/0x1b20 [ 251.571063][ T27] ? queue_io+0x630/0x630 [ 251.575616][ T27] ? __writeback_inodes_wb+0x400/0x400 [ 251.582019][ T27] __writeback_inodes_wb+0x114/0x400 [ 251.601036][ T27] wb_writeback+0x4b1/0xe10 [ 251.640159][ T27] ? mark_lock+0x9a/0x340 [ 251.661633][ T27] ? percpu_ref_tryget+0x260/0x260 [ 251.669217][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 251.678160][ T27] ? _find_next_bit+0x11b/0x120 [ 251.689973][ T27] wb_workfn+0xc9e/0x1020 [ 251.704019][ T27] ? inode_wait_for_writeback+0x280/0x280 [ 251.725733][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 251.745925][ T27] ? print_irqtrace_events+0x210/0x210 [ 251.760404][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 251.770644][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 251.780695][ T27] ? process_one_work+0x7a9/0x11d0 [ 251.790753][ T27] process_one_work+0x8a9/0x11d0 [ 251.800147][ T27] ? worker_detach_from_pool+0x260/0x260 [ 251.812815][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 251.850247][ T27] ? kthread_data+0x4e/0xc0 [ 251.873314][ T27] ? wq_worker_running+0x97/0x190 [ 251.890529][ T27] worker_thread+0xa47/0x1200 [ 251.906466][ T27] ? __sched_text_start+0x8/0x8 [ 251.924678][ T27] kthread+0x28d/0x320 [ 251.941978][ T27] ? worker_clr_flags+0x190/0x190 [ 251.960080][ T27] ? kthread_blkcg+0xd0/0xd0 [ 251.974536][ T27] ret_from_fork+0x1f/0x30 [ 251.987415][ T27] [ 251.993526][ T27] [ 251.993526][ T27] Showing all locks held in the system: [ 252.019089][ T27] 6 locks held by kworker/u4:0/9: [ 252.034393][ T27] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.067591][ T27] #1: ffffc900000e7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.091608][ T27] #2: ffffffff8e28da10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 252.111683][ T27] #3: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 252.134576][ T27] #4: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 252.145680][ T27] #5: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 252.160440][ T27] 2 locks held by kworker/u4:1/11: [ 252.167013][ T27] #0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 252.188928][ T27] #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 252.207048][ T27] 1 lock held by rcu_tasks_kthre/12: [ 252.213308][ T27] #0: ffffffff8d12ae90 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 252.225043][ T27] 1 lock held by rcu_tasks_trace/13: [ 252.230536][ T27] #0: ffffffff8d12b690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 252.243978][ T27] 1 lock held by khungtaskd/27: [ 252.250043][ T27] #0: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 252.272397][ T27] 4 locks held by kworker/u4:2/33: [ 252.280053][ T27] #0: ffff888145259138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.292133][ T27] #1: ffffc90000aa7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.304541][ T27] #2: ffff88805d29c0e0 (&type->s_umount_key#74){.+.+}-{3:3}, at: trylock_super+0x1b/0xf0 [ 252.321657][ T27] #3: ffff88805c6ab008 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580 [ 252.334914][ T27] 5 locks held by kworker/0:2/153: [ 252.341234][ T27] #0: ffff888143ac2d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.363529][ T27] #1: ffffc90002d5fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.388252][ T27] #2: ffff888022f37190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 252.409166][ T27] #3: ffff888022f434f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2471/0x5730 [ 252.432006][ T27] #4: ffff8880217e1a68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x249e/0x5730 [ 252.443900][ T27] 2 locks held by getty/3302: [ 252.449487][ T27] #0: ffff88814baba098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 252.460008][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 252.490028][ T27] 2 locks held by kworker/1:3/3550: [ 252.513431][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.526552][ T27] #1: ffffc9000404fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.540151][ T27] 2 locks held by kworker/1:6/3596: [ 252.546212][ T27] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.558382][ T27] #1: ffffc900042cfd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.571215][ T27] 2 locks held by kworker/u4:8/4208: [ 252.577581][ T27] 4 locks held by syz.3.273/4451: [ 252.582764][ T27] 2 locks held by kworker/1:14/5038: [ 252.605572][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.616785][ T27] #1: ffffc9000332fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.630438][ T27] 1 lock held by syz.1.444/5090: [ 252.639606][ T27] #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700 [ 252.649233][ T27] 4 locks held by kworker/u4:12/5238: [ 252.655052][ T27] 3 locks held by kworker/0:14/5340: [ 252.661128][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.672050][ T27] #1: ffffc900051d7d20 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.681655][ T27] #2: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 252.721730][ T27] 1 lock held by syz.2.793/6178: [ 252.728757][ T27] 1 lock held by syz.4.811/6229: [ 252.735562][ T27] #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700 [ 252.745709][ T27] 1 lock held by syz.4.844/6346: [ 252.751057][ T27] #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700 [ 252.763469][ T27] 4 locks held by syz.4.864/6401: [ 252.770049][ T27] #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700 [ 252.783573][ T27] #1: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 252.802604][ T27] #2: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 252.826848][ T27] #3: ffff888142b0d088 (&virtscsi_vq->vq_lock){-.-.}-{2:2}, at: virtscsi_add_cmd+0xb1/0x6d0 [ 252.841110][ T27] 1 lock held by syz.3.884/6473: [ 252.846391][ T27] #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700 [ 252.856646][ T27] 1 lock held by syz.3.902/6533: [ 252.865856][ T27] #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700 [ 252.875474][ T27] 1 lock held by syz.2.923/6596: [ 252.880465][ T27] #0: ffff88801fb33b60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x2a/0x910 [ 252.894930][ T27] [ 252.897392][ T27] ============================================= [ 252.897392][ T27] [ 252.920624][ T27] NMI backtrace for cpu 1 [ 252.924993][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0 [ 252.932899][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 252.943053][ T27] Call Trace: [ 252.946341][ T27] [ 252.949316][ T27] dump_stack_lvl+0x1e3/0x2cb [ 252.954115][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 252.959609][ T27] ? panic+0x764/0x764 [ 252.963694][ T27] ? vprintk_emit+0x622/0x740 [ 252.968393][ T27] ? printk_sprint+0x490/0x490 [ 252.973175][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 252.978312][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 252.983276][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 252.989446][ T27] ? _printk+0xd1/0x111 [ 252.993614][ T27] ? panic+0x764/0x764 [ 252.997692][ T27] ? __wake_up_klogd+0xcc/0x100 [ 253.002729][ T27] ? panic+0x764/0x764 [ 253.006951][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 253.013063][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 253.019159][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 253.025160][ T27] watchdog+0xf88/0xfd0 [ 253.029325][ T27] ? watchdog+0x1f8/0xfd0 [ 253.033658][ T27] kthread+0x28d/0x320 [ 253.037725][ T27] ? hungtask_pm_notify+0x50/0x50 [ 253.042743][ T27] ? kthread_blkcg+0xd0/0xd0 [ 253.047323][ T27] ret_from_fork+0x1f/0x30 [ 253.051746][ T27] [ 253.055998][ T27] Sending NMI from CPU 1 to CPUs 0: [ 253.061219][ C0] NMI backtrace for cpu 0 [ 253.061229][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.96-syzkaller #0 [ 253.061245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 253.061254][ C0] Workqueue: bat_events batadv_nc_worker [ 253.061276][ C0] RIP: 0010:__local_bh_enable_ip+0x11f/0x1f0 [ 253.061299][ C0] Code: fa a9 00 02 00 00 74 05 e8 2e 3a 3d 00 65 8b 05 df 4f ae 7e 25 00 ff 00 00 3d 00 02 00 00 75 0a 48 8b 7c 24 18 e8 01 16 16 00 01 00 00 00 44 29 f8 65 01 05 ba 4f ae 7e 65 8b 05 b3 4f ae 7e [ 253.061311][ C0] RSP: 0018:ffffc90000107aa0 EFLAGS: 00000046 [ 253.061323][ C0] RAX: 2300443bb9ec7700 RBX: 1ffff92000020f58 RCX: ffffffff91c94103 [ 253.061335][ C0] RDX: dffffc0000000000 RSI: ffffffff8aec13c0 RDI: ffffffff8b3d4760 [ 253.061345][ C0] RBP: ffffc90000107b50 R08: dffffc0000000000 R09: ffffed100c3b5049 [ 253.061356][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 253.061374][ C0] R13: 1ffff92000020f5c R14: ffffc90000107ae0 R15: 0000000000000201 [ 253.061384][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 253.061397][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.061408][ C0] CR2: 00007fd187ad0ab8 CR3: 000000000ce8e000 CR4: 00000000003506f0 [ 253.061420][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.061429][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.061438][ C0] Call Trace: [ 253.061446][ C0] [ 253.061452][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 253.061472][ C0] ? read_lock_is_recursive+0x10/0x10 [ 253.061492][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 253.061512][ C0] ? nmi_handle+0x25/0x440 [ 253.061539][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 253.061557][ C0] ? nmi_handle+0x12e/0x440 [ 253.061575][ C0] ? nmi_handle+0x25/0x440 [ 253.061593][ C0] ? __local_bh_enable_ip+0x11f/0x1f0 [ 253.061611][ C0] ? default_do_nmi+0x62/0x150 [ 253.061625][ C0] ? exc_nmi+0xa8/0x100 [ 253.061638][ C0] ? end_repeat_nmi+0x16/0x31 [ 253.061661][ C0] ? __local_bh_enable_ip+0x11f/0x1f0 [ 253.061680][ C0] ? __local_bh_enable_ip+0x11f/0x1f0 [ 253.061700][ C0] ? __local_bh_enable_ip+0x11f/0x1f0 [ 253.061718][ C0] [ 253.061722][ C0] [ 253.061728][ C0] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 253.061746][ C0] ? _local_bh_enable+0xa0/0xa0 [ 253.061765][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 253.061782][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 253.061801][ C0] batadv_nc_purge_paths+0x30e/0x3b0 [ 253.061825][ C0] batadv_nc_worker+0x361/0x610 [ 253.061845][ C0] ? process_one_work+0x7a9/0x11d0 [ 253.061860][ C0] process_one_work+0x8a9/0x11d0 [ 253.061882][ C0] ? worker_detach_from_pool+0x260/0x260 [ 253.061899][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 253.061914][ C0] ? kthread_data+0x4e/0xc0 [ 253.061930][ C0] ? wq_worker_running+0x97/0x190 [ 253.061949][ C0] worker_thread+0xa47/0x1200 [ 253.061974][ C0] kthread+0x28d/0x320 [ 253.061984][ C0] ? worker_clr_flags+0x190/0x190 [ 253.061997][ C0] ? kthread_blkcg+0xd0/0xd0 [ 253.062010][ C0] ret_from_fork+0x1f/0x30 [ 253.062035][ C0] [ 253.119483][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 253.119499][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0 [ 253.119516][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 253.119527][ T27] Call Trace: [ 253.119534][ T27] [ 253.119541][ T27] dump_stack_lvl+0x1e3/0x2cb [ 253.119571][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 253.119593][ T27] ? panic+0x764/0x764 [ 253.119610][ T27] ? llist_add_batch+0x160/0x1d0 [ 253.119635][ T27] ? vscnprintf+0x59/0x80 [ 253.119655][ T27] panic+0x318/0x764 [ 253.119673][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 253.119697][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 253.119719][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 253.119740][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 253.119765][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 253.119790][ T27] watchdog+0xfc7/0xfd0 [ 253.119814][ T27] ? watchdog+0x1f8/0xfd0 [ 253.119837][ T27] kthread+0x28d/0x320 [ 253.119851][ T27] ? hungtask_pm_notify+0x50/0x50 [ 253.119869][ T27] ? kthread_blkcg+0xd0/0xd0 [ 253.119885][ T27] ret_from_fork+0x1f/0x30 [ 253.119917][ T27] [ 253.124046][ T27] Kernel Offset: disabled [ 253.495258][ T27] Rebooting in 86400 seconds..