last executing test programs: 11m16.358281687s ago: executing program 32 (id=2447): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m37.286897111s ago: executing program 33 (id=3279): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 6m34.532985815s ago: executing program 34 (id=3284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "000000000500", "000000072d85a4609e9104a000", 'x\x00\a\x00', "bc7e7f5df6aec397"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000140)={@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0xb, 0x6, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @bcast, @default]}) 6m31.336966668s ago: executing program 35 (id=3291): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) pipe2$9p(&(0x7f00000027c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6}) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa2741, 0x80) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100"], 0x54}}, 0x0) 5m34.716256516s ago: executing program 36 (id=3355): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0) 5m0.417433171s ago: executing program 37 (id=3428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, 0x0, 0x0) 4m51.842785502s ago: executing program 38 (id=3450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x260202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000340)=""/193) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2]}}, 0x5c) sendto$inet6(r4, &(0x7f0000000240)=':', 0xfffffdfe, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) shutdown(r4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 4m24.250135463s ago: executing program 8 (id=3529): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 4m23.318820503s ago: executing program 8 (id=3532): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x8000000}) r5 = bpf$MAP_CREATE(0x3f000000, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r6, 0x0, 0xffffffff}, 0x18) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0xffffffff, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x50) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r8, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x81044d03, &(0x7f0000000000)) 4m14.040763499s ago: executing program 8 (id=3550): syz_clone(0x50004400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 4m13.477539499s ago: executing program 8 (id=3552): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r0, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 4m12.854367672s ago: executing program 8 (id=3555): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1fe, 0x604341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x0, 0xf, 0x404, 0x1, 0xd, 0x5, 0x0}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r4, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x2}, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r6, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r7 = gettid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x2, 0x5004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="71756f74612c670600000000000000626c6f636b5f6861726454aee8a9696d69743d332c00263dba982070fc86f3fb6d"]) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 4m2.531745894s ago: executing program 2 (id=3567): syz_usb_connect(0x2, 0x24, 0x0, 0x0) 4m1.710896689s ago: executing program 39 (id=3547): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r3}) 4m1.501228372s ago: executing program 2 (id=3572): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) read$FUSE(r1, 0x0, 0x0) 3m59.953240777s ago: executing program 2 (id=3577): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 3m59.277105327s ago: executing program 2 (id=3578): mkdir(0x0, 0x0) r0 = inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x101000, 0x0) read$FUSE(r3, 0x0, 0x0) setpgid(0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="7799", 0x2) inotify_add_watch(r0, 0x0, 0x0) timer_create(0x3, &(0x7f000000e780)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}, &(0x7f000000e7c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) unlink(&(0x7f0000000040)='./file0\x00') 3m56.905020252s ago: executing program 40 (id=3555): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1fe, 0x604341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x0, 0xf, 0x404, 0x1, 0xd, 0x5, 0x0}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r4, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x2}, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r6, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r7 = gettid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x2, 0x5004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="71756f74612c670600000000000000626c6f636b5f6861726454aee8a9696d69743d332c00263dba982070fc86f3fb6d"]) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 3m43.384755379s ago: executing program 41 (id=3578): mkdir(0x0, 0x0) r0 = inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x101000, 0x0) read$FUSE(r3, 0x0, 0x0) setpgid(0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="7799", 0x2) inotify_add_watch(r0, 0x0, 0x0) timer_create(0x3, &(0x7f000000e780)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}, &(0x7f000000e7c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) unlink(&(0x7f0000000040)='./file0\x00') 3m26.880614513s ago: executing program 42 (id=3593): syz_open_dev$sg(0x0, 0x0, 0x20c02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @private0}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d7703a5a481177ee24c34146464fa6d234e36f00a5410e"], 0x18}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r1, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x13}}, 0x14) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) io_uring_setup(0x473c, &(0x7f0000000200)={0x0, 0xc0e4, 0x200, 0x1, 0x349}) socket(0x10, 0x80002, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='memory.stat\x00', 0x26e1, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0xfff) sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)='7', 0x1}], 0x1}, 0x40488c4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) 2m55.197997536s ago: executing program 6 (id=3612): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x14, 0x2, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x42050004, 0x0, 0x0) 2m54.212572609s ago: executing program 43 (id=3605): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) preadv(r0, 0x0, 0x0, 0xffff0000, 0x8) 2m50.568863455s ago: executing program 6 (id=3617): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000000c0), 0x214004, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m49.96867583s ago: executing program 6 (id=3618): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r0, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2m49.283827219s ago: executing program 6 (id=3620): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) futex(0x0, 0x6, 0x4, 0x0, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r6, 0x10, 0x17e, 0x7) accept4(r6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m44.178747502s ago: executing program 6 (id=3625): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x0, 0x1) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xc8) 2m40.621486164s ago: executing program 6 (id=3630): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2m33.32485898s ago: executing program 5 (id=3642): r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m32.177810032s ago: executing program 5 (id=3644): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m31.347931511s ago: executing program 5 (id=3645): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f00000000c0)=0x6e, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd(0x5) r8 = eventfd(0x3) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={r7, 0x7, 0x0, r5}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r8, 0x9}) r9 = dup3(r4, r6, 0x0) fstatfs(r3, &(0x7f00000003c0)=""/253) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000000b0f0667"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000200)=0x80) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) 2m29.662622999s ago: executing program 7 (id=3650): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43f", 0x10}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m28.628441811s ago: executing program 5 (id=3651): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x1000}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2085}}) io_uring_enter(r2, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) 2m28.225881324s ago: executing program 7 (id=3652): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9800) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000100000000030073797a320000000014000000110001", @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a3000000000"], 0x88}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000014c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000480)=0x1, 0x2) r5 = syz_open_procfs(r4, &(0x7f0000000040)='net/l2cap\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4012031, r5, 0x0) statx(r0, 0x0, 0x400, 0x400, 0x0) syz_usb_disconnect(r1) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 2m27.024245795s ago: executing program 5 (id=3653): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b2000093"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) 2m24.675908508s ago: executing program 44 (id=3630): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2m24.625398929s ago: executing program 7 (id=3659): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2m24.578752992s ago: executing program 5 (id=3661): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x74, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(0x0, r4) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) unlink(&(0x7f0000000040)='./file0\x00') 2m24.149025599s ago: executing program 7 (id=3662): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a50000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0xfcca, 0x100, 0x80000ffc, 0x5cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m20.833346974s ago: executing program 1 (id=3663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2m20.832983463s ago: executing program 7 (id=3664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m20.282345117s ago: executing program 1 (id=3665): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m19.954807935s ago: executing program 7 (id=3666): socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0xf6, 0x200000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000500)="ed9b3d3895c8a6c8f04b24b19dc69ba08150cbdf52e34f1eb7687ca18dcd492805b84fe27b3992a17acc9df0cea7ceb4185c4ffa422b91e8b3dca71ca94229a23babe85112e280c3fdd2ca994feadede3a3826f9c376c59daa39c5548939fa6ef059ac71348a8035d69109d2a4aeb6d485751bdb35dc62588d4f1574a19968e80b14a23220", 0x0, 0x4}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000240)=0xfffffffe, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000400)=""/205, 0xcd, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m18.947135321s ago: executing program 1 (id=3669): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9800) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000100000000030073797a320000000014000000110001", @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a3000000000"], 0x88}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000014c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000480)=0x1, 0x2) r5 = syz_open_procfs(r4, &(0x7f0000000040)='net/l2cap\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4012031, r5, 0x0) statx(r0, 0x0, 0x400, 0x400, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 2m15.962910374s ago: executing program 1 (id=3671): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2m15.34092906s ago: executing program 1 (id=3673): io_uring_setup(0xb3a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x401, 0x8241) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 2m14.475562788s ago: executing program 1 (id=3675): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffd, 0x61, 0x14, 0x90}, [@ldst={0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc4b3, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000440)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x49d0, &(0x7f00000005c0)={0x0, 0xfa56, 0x4, 0x1, 0x236, 0x0, r1}, &(0x7f0000000400), 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x24035, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) writev(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)="e97c678e43bc10903e6ef9ab4640b5084cc97f6c033a1ca8e9f012f4afa7a71d6bdc914bf699107705a3599ccf061941524842e779f7c7c11c5223d7155cc2fb8071f8f5b5a722a06b0275974491e047e5913c6662724d33b7e097b12bee27086e70268aff05b3952724c4d22ec8f8e1659d94d9016fb813edee", 0x7a}, {&(0x7f0000000140)="24f0edfb1b7b9d870dd0b2fb1ef029eae21ea527fbd381fc6e12fdb117c3c2fe3c230d472d7b74bdbf23fcfe249ce234988ec1a6c732de8174a283a21b07c6e908a86ca11014036cc3ed4d6963", 0x4d}, {&(0x7f00000001c0)="fe6ba556c55de2a66cded70eee574f17cce36eeed0b95b161f6cc36eac4d475d4ec4861a9c1119481bc6070f81031b6ef177d2d5a8b1c0d29c8f", 0x3a}, {&(0x7f0000000200)="202c7b93ac2dd87e5b6e92c12ba2aba3", 0x10}, {&(0x7f0000000280)="96b3a3198ae1", 0x6}, {&(0x7f0000000380)="fed891b2f1e95493f4b38f8a921996b18828b0263d12488adacdcffb319b2f3a55ae3962cd3c014fa4c2df6c2eb85559976644536676d54dc34efe5f4eea0d8a1af3bb70c6628d17a4cd3112e944051ccb8a8c274b59453a3da1d92f7e2b1cb40f20802a747abc9878b1a4ed16", 0x6d}, {&(0x7f0000000400)="1043866fecca092df09bbab51d1339962612a597ec8f7d67e6f54177b76a511decc72806185a6aa87fe073b4d1d5cc8807f4ee15e6004657443e502331159fdfaafdf074ad4526c121b7d62a471a01b9e07f92", 0x53}, {&(0x7f0000000480)="e05ca0f4c51c129b1b616fe6931ea18df41d2882d133b8e50b2c7cd9a68022213eb59056bd90cdafaa3149c425c274390c1e3e3b321de464b2a90da9c0a3219275c6cc686f620387b00fe7e754f84135a6652332228936d95a4cb9d5f13092404c6532c3bee1f0e042d758c18acaadc4d611c7aa653809febe6e", 0x7a}], 0x8) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x2) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000080)={@any, 0x4}) 2m9.101072158s ago: executing program 45 (id=3661): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x74, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(0x0, r4) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) unlink(&(0x7f0000000040)='./file0\x00') 2m4.081013098s ago: executing program 46 (id=3666): socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0xf6, 0x200000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000500)="ed9b3d3895c8a6c8f04b24b19dc69ba08150cbdf52e34f1eb7687ca18dcd492805b84fe27b3992a17acc9df0cea7ceb4185c4ffa422b91e8b3dca71ca94229a23babe85112e280c3fdd2ca994feadede3a3826f9c376c59daa39c5548939fa6ef059ac71348a8035d69109d2a4aeb6d485751bdb35dc62588d4f1574a19968e80b14a23220", 0x0, 0x4}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000240)=0xfffffffe, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000400)=""/205, 0xcd, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m58.959968777s ago: executing program 47 (id=3675): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffd, 0x61, 0x14, 0x90}, [@ldst={0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc4b3, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000440)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x49d0, &(0x7f00000005c0)={0x0, 0xfa56, 0x4, 0x1, 0x236, 0x0, r1}, &(0x7f0000000400), 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x24035, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) writev(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)="e97c678e43bc10903e6ef9ab4640b5084cc97f6c033a1ca8e9f012f4afa7a71d6bdc914bf699107705a3599ccf061941524842e779f7c7c11c5223d7155cc2fb8071f8f5b5a722a06b0275974491e047e5913c6662724d33b7e097b12bee27086e70268aff05b3952724c4d22ec8f8e1659d94d9016fb813edee", 0x7a}, {&(0x7f0000000140)="24f0edfb1b7b9d870dd0b2fb1ef029eae21ea527fbd381fc6e12fdb117c3c2fe3c230d472d7b74bdbf23fcfe249ce234988ec1a6c732de8174a283a21b07c6e908a86ca11014036cc3ed4d6963", 0x4d}, {&(0x7f00000001c0)="fe6ba556c55de2a66cded70eee574f17cce36eeed0b95b161f6cc36eac4d475d4ec4861a9c1119481bc6070f81031b6ef177d2d5a8b1c0d29c8f", 0x3a}, {&(0x7f0000000200)="202c7b93ac2dd87e5b6e92c12ba2aba3", 0x10}, {&(0x7f0000000280)="96b3a3198ae1", 0x6}, {&(0x7f0000000380)="fed891b2f1e95493f4b38f8a921996b18828b0263d12488adacdcffb319b2f3a55ae3962cd3c014fa4c2df6c2eb85559976644536676d54dc34efe5f4eea0d8a1af3bb70c6628d17a4cd3112e944051ccb8a8c274b59453a3da1d92f7e2b1cb40f20802a747abc9878b1a4ed16", 0x6d}, {&(0x7f0000000400)="1043866fecca092df09bbab51d1339962612a597ec8f7d67e6f54177b76a511decc72806185a6aa87fe073b4d1d5cc8807f4ee15e6004657443e502331159fdfaafdf074ad4526c121b7d62a471a01b9e07f92", 0x53}, {&(0x7f0000000480)="e05ca0f4c51c129b1b616fe6931ea18df41d2882d133b8e50b2c7cd9a68022213eb59056bd90cdafaa3149c425c274390c1e3e3b321de464b2a90da9c0a3219275c6cc686f620387b00fe7e754f84135a6652332228936d95a4cb9d5f13092404c6532c3bee1f0e042d758c18acaadc4d611c7aa653809febe6e", 0x7a}], 0x8) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x2) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000080)={@any, 0x4}) 1m14.017234241s ago: executing program 9 (id=3741): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x214004, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m13.982319551s ago: executing program 8 (id=3681): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0xffffffffff600000, 0x2, 0x0, 0x5, 0x0, [{0x4, 0x7, 0xe, '\x00', 0x2}, {0x5, 0x7, 0x9, '\x00', 0x9}, {0x9, 0x22, 0x53}, {0xa, 0xc, 0x8}, {0x4, 0x4, 0x4, '\x00', 0x7}, {0x1, 0x1, 0x10, '\x00', 0x81}, {0x8, 0x0, 0x7, '\x00', 0x5}, {0x7f, 0x9, 0x5c, '\x00', 0x1}, {0xe, 0x7, 0x4, '\x00', 0x8}, {0x9, 0x9, 0xb, '\x00', 0x8}, {0x9, 0x0, 0x2, '\x00', 0x2}, {0xc0, 0x1, 0x47, '\x00', 0x8}, {0x4, 0x3, 0xcf}, {0x2, 0x3, 0x6, '\x00', 0x1}, {0x8, 0x5, 0x3, '\x00', 0xc}, {0x43, 0x3, 0x1, '\x00', 0x9}, {0x3, 0x80, 0x8, '\x00', 0x40}, {0x4, 0x3, 0xa, '\x00', 0x5}, {0xa, 0xd3, 0x1, '\x00', 0xf7}, {0x3, 0xa1, 0xf, '\x00', 0x9}, {0x5, 0x7, 0xe, '\x00', 0x2}, {0x3, 0x0, 0x1, '\x00', 0x2}, {0x3, 0x4, 0xee, '\x00', 0x75}, {0x3, 0x7, 0x81, '\x00', 0x6}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = getpid() r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) writev(r4, &(0x7f0000000300)=[{&(0x7f00000003c0)='O', 0x1}], 0x1) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r6, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) 1m13.563397523s ago: executing program 2 (id=3686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000009800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r6, 0x0, &(0x7f0000000d00)) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f00000005c0)={0x0, 0x2000000, {0x8, 0xfffffffd, 0xfffff1b4, 0x3}}) socket$inet6_udp(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, 0x0, 0x40040) 1m13.350403265s ago: executing program 9 (id=3743): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x150, 0x0, 0x0, [{{0x2, 0x2, 0x0, 0x8001, 0x7, 0x9, {0x3, 0x2, 0x9, 0x9, 0x180000000000, 0x1000, 0x1, 0x2, 0x2, 0x6000, 0x9, r2, r3, 0x9, 0xf}}, {0x2, 0xffffffffffff8001, 0x5, 0x10000, 'fuse\x00'}}, {{0x2, 0x2, 0xc29e, 0x263, 0x4719, 0x9, {0x2, 0x931f, 0x347, 0x0, 0x1, 0x8, 0xf3, 0x7, 0x5, 0x4000, 0x4b, 0x0, r3, 0x7, 0x200}}, {0x4, 0x4, 0x5, 0x4, 'fuse\x00'}}]}, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) 1m12.247715006s ago: executing program 9 (id=3744): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000ca3cf40d813110062d00102030109021200010000000009"], 0x0) 1m10.040848095s ago: executing program 9 (id=3747): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) inotify_init1(0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x74, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="7799", 0x2) 1m7.086976003s ago: executing program 2 (id=3749): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_fuse_handle_req(r1, &(0x7f000000c3c0)="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", 0x2000, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) socket$kcm(0x10, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m5.118057682s ago: executing program 9 (id=3750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xb, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0x8}, 0xb, 0x2, 0x80008, 0x5, 0x5, 0x2, 0x9, 0x12, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x102, 0x2, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c860}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m1.570154214s ago: executing program 9 (id=3757): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f000077f000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) 57.175230822s ago: executing program 48 (id=3681): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0xffffffffff600000, 0x2, 0x0, 0x5, 0x0, [{0x4, 0x7, 0xe, '\x00', 0x2}, {0x5, 0x7, 0x9, '\x00', 0x9}, {0x9, 0x22, 0x53}, {0xa, 0xc, 0x8}, {0x4, 0x4, 0x4, '\x00', 0x7}, {0x1, 0x1, 0x10, '\x00', 0x81}, {0x8, 0x0, 0x7, '\x00', 0x5}, {0x7f, 0x9, 0x5c, '\x00', 0x1}, {0xe, 0x7, 0x4, '\x00', 0x8}, {0x9, 0x9, 0xb, '\x00', 0x8}, {0x9, 0x0, 0x2, '\x00', 0x2}, {0xc0, 0x1, 0x47, '\x00', 0x8}, {0x4, 0x3, 0xcf}, {0x2, 0x3, 0x6, '\x00', 0x1}, {0x8, 0x5, 0x3, '\x00', 0xc}, {0x43, 0x3, 0x1, '\x00', 0x9}, {0x3, 0x80, 0x8, '\x00', 0x40}, {0x4, 0x3, 0xa, '\x00', 0x5}, {0xa, 0xd3, 0x1, '\x00', 0xf7}, {0x3, 0xa1, 0xf, '\x00', 0x9}, {0x5, 0x7, 0xe, '\x00', 0x2}, {0x3, 0x0, 0x1, '\x00', 0x2}, {0x3, 0x4, 0xee, '\x00', 0x75}, {0x3, 0x7, 0x81, '\x00', 0x6}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = getpid() r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) writev(r4, &(0x7f0000000300)=[{&(0x7f00000003c0)='O', 0x1}], 0x1) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r6, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) 54.816989951s ago: executing program 3 (id=3763): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0xfffffffe}, 0x26}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) syz_usb_connect(0x2, 0x36f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xc6, 0x5e, 0xb8, 0x78, 0x3149, 0x33ee, 0xc7ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35d, 0x1, 0x5a, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x57, 0x6, 0x8, 0x9a, 0xec, 0x8a, 0x4, [@generic={0x29, 0xd, "19d78cc8d65f068bdfc844399bb60a60f8ce4b78432e3225befda61ef60e34e2c06de92c9b9321"}], [{{0x9, 0x5, 0x7, 0xe, 0x8, 0x2, 0xb, 0x1, [@generic={0xc1, 0xd, "8d1a5575867d8510a422205b8fae4d6a567f67f3ce25f9955d25e4f28103288155ed5c13e567cace8455ad57dea890165077bccd5e586f4870d58cf4006552e340df817fc6f12cb83ce3f435fe8dc9b7c07905680fcd5d94769dbd95bef4bc04b2c920e25ae0a37f70f61d5e046b04063d118e4e104a8df762b3e3cca1d8cceb35a83df6eb2a5638255a52b2ba06db8175980d97b7dd93a1637202050636ea1fb48cf96b68648091733f8a0cf22923a8e9df1211c6c4850037a9a0982462d1"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x2}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x5, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xbd, 0x6}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x2, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x7f, 0x41, 0x4, [@generic={0xae, 0x4, "1b8cd58b7d2fbe5126d9d8256becc6cdac813e75de75d71b9cc2ccdccbb9b0bd4c3fc1e72107eb7a2365df27d429dc1bde1fa66eac8611a58691017a6a22c35f119fc3a090f4239200252ffa2f9dba512c12a0791221b4e3b57e5e56f851ded499c052a6612d4c048541c745b2d4034d250a2ed31fb62a9336c1b8f3f2dea8abdd4b6be97ad3ccce2e0b432e934d38e3f50a94dac64536f152f1f12c4be4935cf8b32f195c121dfc8cb4123a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xff, 0x1, 0xfc, [@generic={0x77, 0x0, "d14a254936173c6910d1708bcd03abaa6e87850b06d499bbfd7316dd2dc58d8a255c6f04bf07425f456a281bd956427b9f37b9d986e354f270fee34bbc36fd0a5d6ec9f62ed72bd2f15a3ee56b47228a2297594e639038a3ee6644e96bd5b5b3c92a426ec25f85ef2b4d02d13ecde46f9f215129c9"}, @generic={0x57, 0x9, "9bcdb7c45bae0d30c46a9af47c958635ef5474565549d8a0fe6334b03e96917ca37b287f76dc191040d71015a254ea6ee71345a499ae865fc004f6118aa961d06eb63199546ecd14be20d431ad9a71e46430b758d6"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x3, 0x0, 0x5, [@generic={0x88, 0x7, "495fc6ddbf82bd97cc2f699ac115b5f19a118c7a2b3dddfe55dd6c644a2bcac8ba06ba7e9208304ba6a3df711019585311ba0d2414a28899871f6b202a61fc70a378a5059b55fbbf7eec5d21bb28e5ebe951360903ab4d4a0051f819a48bce91ca9d53ebea80806e8ed14288156319cf3a5d82952c707dd247fe3d77725e2349d29e90deee54"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x8, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x56, 0x3}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xfb, 0x4, 0x0, 0x20, 0x80}, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="010500400089034ab8f2e98ed2c335a796ddf2b282a9c371a3cd6ee21f14f8f054b560fae4ad0ead4e2299aa439749b0026dfbdd73b654d394b21ae22f703247d94c2a0c1b30c873729e62265cf82afa6d355686f0ee7c54b7f3fff064990ea1ed49408cf4f8a2c4f3c52a5dc7ca4e03"], 0x1, [{0x55, &(0x7f0000000740)=@string={0x55, 0x3, "0b3315b0c43405c3c152484e6a4795e701c6c56328478836077778953ab0f5849f759bdda57e620518d22b0ed16513cdd2265742cf470a175a456e18ab8262ae99f8b045d928c6bf248c67b3cf58f1575a2d74"}}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@multicast1]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 50.878572554s ago: executing program 49 (id=3749): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_fuse_handle_req(r1, &(0x7f000000c3c0)="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", 0x2000, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) socket$kcm(0x10, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 48.606102511s ago: executing program 3 (id=3765): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 47.43783394s ago: executing program 3 (id=3766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000ec"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_usb_connect(0x0, 0x57, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d684e120080490303fa6010203010902450003000000000904fa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 45.815277072s ago: executing program 50 (id=3757): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f000077f000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) 45.159560459s ago: executing program 3 (id=3768): socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 44.287067151s ago: executing program 3 (id=3770): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 40.391355857s ago: executing program 3 (id=3772): open(0x0, 0xd89a3c, 0x22) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f000077f000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 24.570802607s ago: executing program 51 (id=3772): open(0x0, 0xd89a3c, 0x22) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f000077f000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 8.761980702s ago: executing program 4 (id=3789): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x28b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x6c, r2, 0x105, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xfffffe2b}}, 0x2200c840) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) process_mrelease(0xffffffffffffffff, 0x0) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r6}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7.569260147s ago: executing program 0 (id=3790): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 6.565145767s ago: executing program 0 (id=3791): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x4000, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) close(0x3) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x20080) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x1, 0xf) unshare(0x40280) setns(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='.\x00', 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000340)={r2, 0x0, {0x0, 0x0, 0x0, 0x100000000000006, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x4, 0xfcd1]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) 5.511440571s ago: executing program 0 (id=3792): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x6) 4.399160466s ago: executing program 0 (id=3793): socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.325784497s ago: executing program 4 (id=3794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYBLOB="176880779e009b80be06f95945ad7f0a07c240914dc4d7e67d5beae2750669fc0e169955d671b073f2078a370605c41997eec5cf89c5551d87ba9dbe0ac23ffeb952ee783df27b442414b892e19415b08de2d89cf556a200"/97, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="bcc0c4960b0ba5d1d381f53d67108825415269e5c2826fed53eb7b5658006f04279001d32891ed2cdad7b540dc4016397252b0c7035115ca5144658f6a6e091e6415910f7734f23d7206f292db41481d9ea893b27bbead031c251df4b7917a85d3bf54cb2e5fdbe7566d6a9d920525a28dd77be186dd2fa338c111a3e313be7df9e878cc8921ae32e6175f21bd22816b1c4281fab26c8ff5aba117ca034065fae9f99edffb99cfbca23e49a5a69c678e172f1aa3f6c9fc49e641770c342fe7705deed203d438f6eb1a9e6df482299dc32928ae213b676ac1d4e4f70978e18fb2b674a6875f2d9344eed0f3fb9754f1deda84c715e563c7a0c26082353adfdc8c5709abfef96f505aab0efeaccf397d4707a35f4f501e1bb768321c915a7002f63f51c93fe2b30e7777f9e6fc8ee1a591cc1559ee10508deb1a3533784ebe08", @ANYRESDEC, @ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c85c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0xc044) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x0, 0x3, [{0x101, 0x9fb}, {0xb, 0x4}, {0x6, 0x1}, {0x3, 0x7fffffff}, {0x1, 0x8}, {0x7ff, 0x2007}, {0x7, 0x8}, {0x6, 0x2d19}], 0x1, 0x0, 0x0, 0x2, 0x1}}) 3.02705281s ago: executing program 0 (id=3795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d684e120080490303fa6010203010902450003000000000904fa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 2.52835659s ago: executing program 4 (id=3796): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x2, 0xffff042c, 0x2, 0xf}, 0x3, 0x334, 0x2}) 1.777073238s ago: executing program 4 (id=3797): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x0) 1.056666469s ago: executing program 4 (id=3798): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 224.496285ms ago: executing program 4 (id=3799): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x4000, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) close(0x3) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x20080) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x1, 0xf) unshare(0x40280) setns(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='.\x00', 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000340)={r2, 0x0, {0x0, 0x0, 0x0, 0x100000000000006, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x4, 0xfcd1]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) 0s ago: executing program 0 (id=3800): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x6) kernel console output (not intermixed with test programs): errno=0 [ 1032.767586][T15076] netfs: Couldn't get user pages (rc=-14) [ 1032.851505][T14919] veth0_macvtap: entered promiscuous mode [ 1032.902472][T14919] veth1_macvtap: entered promiscuous mode [ 1032.990772][T14919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.114655][T14919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.232488][ T3943] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.274860][ T3943] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.320072][ T3943] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.376214][ T3943] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.775138][T13598] usb 2-1: USB disconnect, device number 60 [ 1035.148597][T14922] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1035.439812][T14922] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 1035.449515][T14922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.457743][T14922] usb 3-1: Product: syz [ 1035.462251][T14922] usb 3-1: Manufacturer: syz [ 1035.467046][T14922] usb 3-1: SerialNumber: syz [ 1035.571811][T14922] usb 3-1: config 0 descriptor?? [ 1035.637669][T14922] comedi comedi4: This driver needs USB 2.0 to operate. Aborting... [ 1035.646090][T14922] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1035.876912][T13598] usb 3-1: USB disconnect, device number 58 [ 1036.499343][T15118] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1036.527996][T15118] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1038.758834][T13598] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1038.955027][T13598] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.966264][T13598] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1038.980850][T13598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1038.992934][T13598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1039.002898][T13598] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1039.130710][T13598] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1039.141623][T13598] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1039.150623][T13598] usb 9-1: Product: syz [ 1039.154913][T13598] usb 9-1: Manufacturer: syz [ 1039.160126][T13598] usb 9-1: SerialNumber: syz [ 1039.231490][T13598] usb 9-1: config 0 descriptor?? [ 1039.472882][T13598] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1039.491952][T13598] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1039.840324][T13598] usb 9-1: USB disconnect, device number 7 [ 1040.179067][ T3686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.187098][ T3686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.277539][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.285852][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.566325][T13598] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1041.748228][T13598] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.759955][T13598] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1041.826000][T13598] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1041.835481][T13598] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.845621][T13598] usb 9-1: Product: syz [ 1041.850699][T13598] usb 9-1: Manufacturer: syz [ 1041.855472][T13598] usb 9-1: SerialNumber: syz [ 1042.131540][T15156] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1042.850492][T15156] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1043.143963][T13598] cdc_mbim 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1043.151353][T13598] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1043.159102][T13598] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 1043.367727][T13598] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 1043.410490][T13598] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1043.463890][T13598] wwan wwan0: port wwan0mbim0 attached [ 1043.486803][T13598] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 42:42:42:42:42:42 [ 1043.634107][T13598] usb 9-1: USB disconnect, device number 8 [ 1043.647619][T13598] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1043.799957][T13598] wwan wwan0: port wwan0mbim0 disconnected [ 1043.902364][T14557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1043.913599][T14557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1043.925018][T14557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1043.939914][T14557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1043.952009][T14557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1044.825089][T15171] chnl_net:caif_netlink_parms(): no params data found [ 1045.639363][ T30] audit: type=1800 audit(1755772968.743:317): pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3471" name="/" dev="9p" ino=2 res=0 errno=0 [ 1045.643855][T15188] netfs: Couldn't get user pages (rc=-14) [ 1046.048893][T12166] Bluetooth: hci0: command tx timeout [ 1046.639358][ T5871] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1046.901746][T15171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.910708][T15171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.918607][T15171] bridge_slave_0: entered allmulticast mode [ 1046.927105][T15171] bridge_slave_0: entered promiscuous mode [ 1046.976325][T15171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.984092][T15171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.991944][T15171] bridge_slave_1: entered allmulticast mode [ 1047.001747][T15171] bridge_slave_1: entered promiscuous mode [ 1047.061768][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.077546][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.089329][ T5871] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1047.099442][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.207696][ T5871] usb 3-1: config 0 descriptor?? [ 1047.464615][T15171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.620105][T15171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.701098][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 1047.707706][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1047.879023][ T5871] usb 3-1: USB disconnect, device number 59 [ 1048.057254][T15171] team0: Port device team_slave_0 added [ 1048.128625][T12166] Bluetooth: hci0: command tx timeout [ 1048.137874][T15171] team0: Port device team_slave_1 added [ 1048.385051][T15206] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1048.626757][T15171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.634185][T15171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.661119][T15171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.817356][T15171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.825006][T15171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.855674][T15171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.350918][T15171] hsr_slave_0: entered promiscuous mode [ 1049.360145][T15171] hsr_slave_1: entered promiscuous mode [ 1049.367872][T15171] debugfs: 'hsr0' already exists in 'hsr' [ 1049.373816][T15171] Cannot create hsr debugfs directory [ 1050.208696][T12166] Bluetooth: hci0: command tx timeout [ 1050.782920][T15225] netfs: Couldn't get user pages (rc=-14) [ 1050.811620][ T30] audit: type=1800 audit(1755772973.893:318): pid=15225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3483" name="/" dev="9p" ino=2 res=0 errno=0 [ 1051.842314][T15171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1051.963786][T15171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1052.065890][T15171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1052.194943][T15171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1052.294006][T12166] Bluetooth: hci0: command tx timeout [ 1052.411955][T14557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1052.426873][T14557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1052.439699][T14557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1052.510361][T14557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1052.581823][T14557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1053.302869][T15171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.489644][T15171] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.603577][ T3943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.611392][ T3943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.858657][ T3943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.866208][ T3943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.958899][ T5871] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1054.236413][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.249255][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.259642][ T5871] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1054.269174][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.576998][ T5871] usb 3-1: config 0 descriptor?? [ 1054.688644][T14557] Bluetooth: hci4: command tx timeout [ 1055.157936][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 1055.164690][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1055.225084][ T5871] usb 3-1: USB disconnect, device number 60 [ 1056.150034][T15238] chnl_net:caif_netlink_parms(): no params data found [ 1056.768661][T14557] Bluetooth: hci4: command tx timeout [ 1057.409233][ T1547] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1057.631702][ T1547] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1057.643284][ T1547] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1057.653037][ T1547] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.735838][T15266] netfs: Couldn't get user pages (rc=-14) [ 1057.778585][ T30] audit: type=1800 audit(1755772980.853:319): pid=15266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3494" name="/" dev="9p" ino=2 res=0 errno=0 [ 1057.848882][ T1547] usb 10-1: config 0 descriptor?? [ 1057.856316][T15171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.860691][T15261] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1058.514001][ T1547] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 1058.726650][T15261] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3492'. [ 1058.811881][T15261] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3492'. [ 1058.848512][T14557] Bluetooth: hci4: command tx timeout [ 1058.947434][T15238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.955024][T15238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.962869][T15238] bridge_slave_0: entered allmulticast mode [ 1058.972071][T15238] bridge_slave_0: entered promiscuous mode [ 1059.105650][T15238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.113346][T15238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.121385][T15238] bridge_slave_1: entered allmulticast mode [ 1059.131217][T15238] bridge_slave_1: entered promiscuous mode [ 1059.170520][T15171] veth0_vlan: entered promiscuous mode [ 1059.264986][T15171] veth1_vlan: entered promiscuous mode [ 1059.509948][ T1547] usb 10-1: USB disconnect, device number 2 [ 1059.705181][T15238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.868297][T15238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.280567][T15238] team0: Port device team_slave_0 added [ 1060.367894][T15171] veth0_macvtap: entered promiscuous mode [ 1060.398858][ T5871] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1060.401592][T15238] team0: Port device team_slave_1 added [ 1060.673141][T15171] veth1_macvtap: entered promiscuous mode [ 1060.745666][ T5871] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1060.755300][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.763676][ T5871] usb 9-1: Product: syz [ 1060.768024][ T5871] usb 9-1: Manufacturer: syz [ 1060.772903][ T5871] usb 9-1: SerialNumber: syz [ 1060.929311][T14557] Bluetooth: hci4: command tx timeout [ 1060.936062][ T3820] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.301522][ T3820] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.380337][T15238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.387522][T15238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.416431][T15238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.564823][ T3820] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.624833][T15238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.632374][T15238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.659748][T15238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.843913][ T3820] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.891139][T15171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.983981][ T5871] cdc_ncm 9-1:1.0: failed to get mac address [ 1062.021725][T15171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.039998][ T5871] cdc_ncm 9-1:1.0: bind() failure [ 1062.087916][T13598] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1062.106152][ T5871] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1062.156821][ T3621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.174878][ T3621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.252180][ T5871] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1062.269597][ T5871] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1062.290342][ T5871] usb 9-1: USB disconnect, device number 9 [ 1062.298604][T13598] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.310300][T13598] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.323239][T13598] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1062.334933][T13598] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.376641][ T3686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.482325][T15238] hsr_slave_0: entered promiscuous mode [ 1062.486365][T13598] usb 10-1: config 0 descriptor?? [ 1062.493638][T15238] hsr_slave_1: entered promiscuous mode [ 1062.497286][T15238] debugfs: 'hsr0' already exists in 'hsr' [ 1062.505361][T15238] Cannot create hsr debugfs directory [ 1062.530923][ T3621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.857170][ T3820] bridge_slave_1: left allmulticast mode [ 1062.864960][ T3820] bridge_slave_1: left promiscuous mode [ 1062.871882][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.954445][T13598] usbhid 10-1:0.0: can't add hid device: -71 [ 1062.961807][T13598] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1062.981580][ T3820] bridge_slave_0: left allmulticast mode [ 1062.987651][ T3820] bridge_slave_0: left promiscuous mode [ 1062.994252][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.026285][T13598] usb 10-1: USB disconnect, device number 3 [ 1063.424581][T15287] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1063.583926][ T3820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.605451][ T3820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.629569][ T3820] bond0 (unregistering): Released all slaves [ 1064.591609][ T3820] hsr_slave_0: left promiscuous mode [ 1064.611372][ T3820] hsr_slave_1: left promiscuous mode [ 1064.619702][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.627260][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.640220][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.647991][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.797747][ T3820] veth1_macvtap: left promiscuous mode [ 1064.803793][ T3820] veth0_macvtap: left promiscuous mode [ 1064.810071][ T3820] veth1_vlan: left promiscuous mode [ 1064.815625][ T3820] veth0_vlan: left promiscuous mode [ 1065.354447][ T30] audit: type=1800 audit(1755772988.473:320): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3504" name="/" dev="9p" ino=2 res=0 errno=0 [ 1065.606755][ T3820] team0 (unregistering): Port device team_slave_1 removed [ 1065.664575][ T3820] team0 (unregistering): Port device team_slave_0 removed [ 1069.432891][T15238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1069.548934][T15238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1069.592974][T14921] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1069.614196][T15238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1069.705085][T15238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1069.832873][T14921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.844232][T14921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.854373][T14921] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1069.863783][T14921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.030365][T14921] usb 3-1: config 0 descriptor?? [ 1070.525897][T14921] usbhid 3-1:0.0: can't add hid device: -71 [ 1070.533060][T14921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1070.609521][T14921] usb 3-1: USB disconnect, device number 61 [ 1070.779556][T15338] netfs: Couldn't get user pages (rc=-14) [ 1070.787336][ T30] audit: type=1800 audit(1755772993.883:321): pid=15338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3515" name="/" dev="9p" ino=2 res=0 errno=0 [ 1071.339705][T15238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.612169][T15238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.747684][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.755315][ T1886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.893792][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.901435][ T1886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.083854][ T3686] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.593839][ T3686] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.628454][T12166] Bluetooth: hci7: command 0x0406 tx timeout [ 1076.761295][ T3686] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.209671][ T3686] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.421533][T15238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.797726][ T3899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.806099][ T3899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.973113][ T3621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.982408][ T3621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.388864][ T3686] bridge_slave_1: left allmulticast mode [ 1078.397073][ T3686] bridge_slave_1: left promiscuous mode [ 1078.404443][ T3686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.484114][T15392] 9pnet_fd: Insufficient options for proto=fd [ 1078.506342][ T3686] bridge_slave_0: left allmulticast mode [ 1078.512296][ T3686] bridge_slave_0: left promiscuous mode [ 1078.519234][ T3686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.252155][ T3686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.388460][ T3686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.408967][ T3686] bond0 (unregistering): Released all slaves [ 1079.679132][ T3686] tipc: Left network mode [ 1080.404933][ T3686] hsr_slave_0: left promiscuous mode [ 1080.437727][ T3686] hsr_slave_1: left promiscuous mode [ 1080.449945][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.457605][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.546409][T15413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1080.601521][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.609464][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.759426][ T3686] veth1_macvtap: left promiscuous mode [ 1080.765185][ T3686] veth0_macvtap: left promiscuous mode [ 1080.771325][ T3686] veth1_vlan: left promiscuous mode [ 1080.777233][ T3686] veth0_vlan: left promiscuous mode [ 1082.044387][ T3686] team0 (unregistering): Port device team_slave_1 removed [ 1082.070060][ T3686] team0 (unregistering): Port device team_slave_0 removed [ 1082.571753][T15433] binder: 15429:15433 unknown command 0 [ 1082.577745][T15433] binder: 15429:15433 ioctl c0306201 800003c0 returned -22 [ 1083.057024][T15238] veth0_vlan: entered promiscuous mode [ 1083.199396][T15238] veth1_vlan: entered promiscuous mode [ 1083.370891][T15436] 9pnet_fd: Insufficient options for proto=fd [ 1083.561366][T15238] veth0_macvtap: entered promiscuous mode [ 1083.661387][T15238] veth1_macvtap: entered promiscuous mode [ 1083.899815][T15238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.952905][T15238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.038788][ T3899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.068391][T14638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.186630][T14638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.219189][T14638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.903749][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.910596][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1089.978356][T15483] 9pnet_fd: Insufficient options for proto=fd [ 1092.167687][ T1886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.175993][ T1886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.437077][ T3686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.446010][ T3686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.033546][T15511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1095.040141][T15511] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1095.092896][T15511] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1095.099385][T15511] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1095.153120][T15511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1095.163379][T15511] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1095.241408][T15511] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1095.343820][T15511] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1095.350385][T15511] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1095.404410][T15511] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1095.433697][T15511] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1095.441173][T15511] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1095.489261][T15511] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1096.288534][T14557] Bluetooth: hci2: command 0x0406 tx timeout [ 1097.168513][T14557] Bluetooth: hci3: command 0x0c1a tx timeout [ 1097.168630][T12166] Bluetooth: hci7: command 0x0406 tx timeout [ 1097.408613][T12166] Bluetooth: hci0: command 0x0c1a tx timeout [ 1097.492219][T12166] Bluetooth: hci4: command 0x0c1a tx timeout [ 1098.371007][T12166] Bluetooth: hci2: command 0x0406 tx timeout [ 1098.488620][T13603] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1098.683881][T13603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1098.695188][T13603] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1098.704533][T13603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.811697][T13603] usb 6-1: config 0 descriptor?? [ 1098.822987][T15519] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1099.249002][T12166] Bluetooth: hci3: command 0x0c1a tx timeout [ 1099.249096][T14557] Bluetooth: hci7: command 0x0406 tx timeout [ 1099.278427][T13603] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1099.476244][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3563'. [ 1099.492633][T12166] Bluetooth: hci0: command 0x0c1a tx timeout [ 1099.522004][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3563'. [ 1099.568859][T12166] Bluetooth: hci4: command 0x0c1a tx timeout [ 1101.172958][ T1547] usb 6-1: USB disconnect, device number 15 [ 1101.342031][T12166] Bluetooth: hci3: command 0x0c1a tx timeout [ 1101.572903][T12166] Bluetooth: hci0: command 0x0c1a tx timeout [ 1101.649556][T12166] Bluetooth: hci4: command 0x0c1a tx timeout [ 1102.286469][T14557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1102.296245][T14557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1102.307274][T14557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1102.321790][T14557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1102.334047][T14557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1103.654020][T14557] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1104.001650][T15543] chnl_net:caif_netlink_parms(): no params data found [ 1104.448899][T14557] Bluetooth: hci1: command tx timeout [ 1104.469138][ T1547] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1104.740756][ T1547] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1104.752601][ T1547] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1104.762593][ T1547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.848964][ T1547] usb 4-1: config 0 descriptor?? [ 1104.855990][T15561] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1105.315369][ T1547] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1105.495235][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3579'. [ 1105.564571][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3579'. [ 1106.549946][T14557] Bluetooth: hci1: command tx timeout [ 1106.954171][T15543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.961867][T15543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.972746][T15543] bridge_slave_0: entered allmulticast mode [ 1106.981575][T15543] bridge_slave_0: entered promiscuous mode [ 1107.046279][T15543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.055156][T15543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.063174][T15543] bridge_slave_1: entered allmulticast mode [ 1107.076831][T15543] bridge_slave_1: entered promiscuous mode [ 1107.106479][T12166] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1107.115997][T12166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1107.126053][T12166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1107.140831][T12166] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1107.152955][T12166] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1107.343036][T13603] usb 4-1: USB disconnect, device number 27 [ 1107.754082][T15543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.869888][T15543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.335027][T15543] team0: Port device team_slave_0 added [ 1108.571907][T15543] team0: Port device team_slave_1 added [ 1108.608992][T12166] Bluetooth: hci1: command tx timeout [ 1108.689640][T15569] chnl_net:caif_netlink_parms(): no params data found [ 1109.043468][T15543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.051171][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.077648][T15543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.111636][T15543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.121412][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.148998][T15543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.409138][T12166] Bluetooth: hci5: command tx timeout [ 1109.692053][T15543] hsr_slave_0: entered promiscuous mode [ 1109.701296][T15543] hsr_slave_1: entered promiscuous mode [ 1109.709424][T15543] debugfs: 'hsr0' already exists in 'hsr' [ 1109.715330][T15543] Cannot create hsr debugfs directory [ 1110.761085][T12166] Bluetooth: hci1: command tx timeout [ 1112.752590][T12166] Bluetooth: hci5: command tx timeout [ 1114.770221][T14557] Bluetooth: hci5: command tx timeout [ 1114.963271][T15569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.970832][T15569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.978773][T15569] bridge_slave_0: entered allmulticast mode [ 1114.987378][T15569] bridge_slave_0: entered promiscuous mode [ 1115.279562][T15569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.287136][T15569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.295177][T15569] bridge_slave_1: entered allmulticast mode [ 1115.304121][T15569] bridge_slave_1: entered promiscuous mode [ 1115.602225][T15569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.635133][T15569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.691709][T15543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1115.932842][T15543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1116.276316][T15569] team0: Port device team_slave_0 added [ 1116.309282][T15543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1116.426487][T15569] team0: Port device team_slave_1 added [ 1116.749779][T15543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1116.834611][T15569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.841886][T15569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.868669][T15569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.868986][T14557] Bluetooth: hci5: command tx timeout [ 1117.203523][T15569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.212952][T15569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.241312][T15569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.428485][T14921] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1117.701098][T15569] hsr_slave_0: entered promiscuous mode [ 1117.710578][T15569] hsr_slave_1: entered promiscuous mode [ 1117.723404][T15569] debugfs: 'hsr0' already exists in 'hsr' [ 1117.729395][T15569] Cannot create hsr debugfs directory [ 1117.789794][T14921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1117.801272][T14921] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1117.811274][T14921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.117811][T14921] usb 4-1: config 0 descriptor?? [ 1118.125455][T15608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1118.322662][ T1886] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.623017][ T1886] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.790152][T14921] elan 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1118.860773][ T1886] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.919153][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 1118.995303][ T1886] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.024148][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 1119.410236][ T1886] bridge_slave_1: left allmulticast mode [ 1119.416127][ T1886] bridge_slave_1: left promiscuous mode [ 1119.422641][ T1886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.533436][ T1886] bridge_slave_0: left allmulticast mode [ 1119.539528][ T1886] bridge_slave_0: left promiscuous mode [ 1119.546141][ T1886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.195330][ T1886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.215310][ T1886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.239807][ T1886] bond0 (unregistering): Released all slaves [ 1120.683928][ T5871] usb 4-1: USB disconnect, device number 28 [ 1121.316734][ T1886] hsr_slave_0: left promiscuous mode [ 1121.361606][ T1886] hsr_slave_1: left promiscuous mode [ 1121.369926][ T1886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.377531][ T1886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.502557][ T1886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.512498][ T1886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.777799][ T1886] veth1_macvtap: left promiscuous mode [ 1121.784323][ T1886] veth0_macvtap: left promiscuous mode [ 1121.791357][ T1886] veth1_vlan: left promiscuous mode [ 1121.797258][ T1886] veth0_vlan: left promiscuous mode [ 1122.225965][T12166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1122.235747][T12166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1122.245108][T12166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1122.362525][T12166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1122.380939][T12166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1123.841483][ T1886] team0 (unregistering): Port device team_slave_1 removed [ 1124.057514][ T1886] team0 (unregistering): Port device team_slave_0 removed [ 1124.449097][T14557] Bluetooth: hci3: command tx timeout [ 1124.780807][T15543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.289055][T15543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.455481][ T1886] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.607204][ T1886] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.695375][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.702902][T15428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.822622][ T1886] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.083261][ T1886] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.156487][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.163956][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.213986][T15569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1126.387616][T15569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1126.598764][T14557] Bluetooth: hci3: command tx timeout [ 1126.656594][T15543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1126.667201][T15543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1126.770736][T15569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1126.976420][ T1886] bridge_slave_1: left allmulticast mode [ 1126.982443][ T1886] bridge_slave_1: left promiscuous mode [ 1126.989364][ T1886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.215699][ T1886] bridge_slave_0: left allmulticast mode [ 1127.221714][ T1886] bridge_slave_0: left promiscuous mode [ 1127.228453][ T1886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.422043][ T1886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.568448][ T1886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.611521][T14557] Bluetooth: hci3: command tx timeout [ 1128.645696][ T1886] bond0 (unregistering): Released all slaves [ 1128.929153][T15569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1129.028870][T15623] chnl_net:caif_netlink_parms(): no params data found [ 1129.487836][ T1886] hsr_slave_0: left promiscuous mode [ 1129.502338][T13603] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1129.543720][ T1886] hsr_slave_1: left promiscuous mode [ 1129.552068][ T1886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.559809][ T1886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.595546][ T1886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.603598][ T1886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.629730][ T1886] veth1_macvtap: left promiscuous mode [ 1129.635472][ T1886] veth0_macvtap: left promiscuous mode [ 1129.642391][ T1886] veth1_vlan: left promiscuous mode [ 1129.647939][ T1886] veth0_vlan: left promiscuous mode [ 1130.042824][T13603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1130.054159][T13603] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1130.063434][T13603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.104115][T13603] usb 6-1: config 0 descriptor?? [ 1130.112530][T15635] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1130.570713][ T1886] team0 (unregistering): Port device team_slave_1 removed [ 1130.646162][T13603] elan 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1130.674888][ T1886] team0 (unregistering): Port device team_slave_0 removed [ 1130.769659][T14557] Bluetooth: hci3: command tx timeout [ 1130.887650][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3596'. [ 1130.923248][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3596'. [ 1131.937173][T15569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.146922][T15569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.311281][T15426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.318971][T15426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.334909][T15426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.342531][T15426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.541682][T13598] usb 6-1: USB disconnect, device number 16 [ 1132.646620][T15543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.667881][T15623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.676817][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.684661][T15623] bridge_slave_0: entered allmulticast mode [ 1133.699228][T15623] bridge_slave_0: entered promiscuous mode [ 1134.074618][T15623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.082391][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.090220][T15623] bridge_slave_1: entered allmulticast mode [ 1134.103904][T15623] bridge_slave_1: entered promiscuous mode [ 1135.009413][T15623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.067614][T15623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.169804][ T1547] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1135.244187][T15569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.276952][T15623] team0: Port device team_slave_0 added [ 1135.342313][T15623] team0: Port device team_slave_1 added [ 1135.375049][ T1547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1135.386552][ T1547] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1135.396538][ T1547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.454496][ T1547] usb 6-1: config 0 descriptor?? [ 1135.462423][T15661] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1135.859100][T15623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.866379][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.896366][T15623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.992917][ T1547] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1136.104972][T15623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.112992][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.139710][T15623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.159319][T15569] veth0_vlan: entered promiscuous mode [ 1136.172476][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3600'. [ 1136.216476][T15569] veth1_vlan: entered promiscuous mode [ 1136.549738][T15623] hsr_slave_0: entered promiscuous mode [ 1136.561171][T15623] hsr_slave_1: entered promiscuous mode [ 1136.569385][T15623] debugfs: 'hsr0' already exists in 'hsr' [ 1136.575223][T15623] Cannot create hsr debugfs directory [ 1136.627175][T15569] veth0_macvtap: entered promiscuous mode [ 1136.695751][T15569] veth1_macvtap: entered promiscuous mode [ 1136.974914][T15569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.119331][T15569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.249349][ T3686] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.432177][ T3686] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.706056][ T3686] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.763775][T15543] veth0_vlan: entered promiscuous mode [ 1137.782507][T15644] usb 6-1: USB disconnect, device number 17 [ 1137.906415][ T3686] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.105766][T15543] veth1_vlan: entered promiscuous mode [ 1138.189611][T12166] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1138.224111][T12166] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1138.241067][T12166] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1138.274347][T12166] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1138.302470][T12166] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1139.443084][T15623] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1139.591568][T15543] veth0_macvtap: entered promiscuous mode [ 1139.695831][T15623] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1139.867735][T15543] veth1_macvtap: entered promiscuous mode [ 1140.046853][T15623] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1140.233603][T15543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.311812][T15623] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1140.371524][T12166] Bluetooth: hci6: command tx timeout [ 1140.462583][T15543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.516099][T15670] chnl_net:caif_netlink_parms(): no params data found [ 1140.600242][ T4117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.917198][ T4117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.046491][ T4117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.152910][ T4117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.425699][T15623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.458539][T12166] Bluetooth: hci6: command tx timeout [ 1142.983000][T15670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.991346][T15670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.999292][T15670] bridge_slave_0: entered allmulticast mode [ 1143.013214][T15670] bridge_slave_0: entered promiscuous mode [ 1143.251435][T15670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.260330][T15670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.268212][T15670] bridge_slave_1: entered allmulticast mode [ 1143.278332][T15670] bridge_slave_1: entered promiscuous mode [ 1143.305471][T15623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.446906][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.454898][ T1886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.589795][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.597153][ T1886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.100381][T15670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.225390][T15670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.540074][T12166] Bluetooth: hci6: command tx timeout [ 1144.795773][T15670] team0: Port device team_slave_0 added [ 1144.971334][T15670] team0: Port device team_slave_1 added [ 1145.422963][T15670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.431024][T15670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.457751][T15670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.756415][T15670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.763754][T15670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.790729][T15670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.611639][T12166] Bluetooth: hci6: command tx timeout [ 1146.749713][T15670] hsr_slave_0: entered promiscuous mode [ 1146.761235][T15670] hsr_slave_1: entered promiscuous mode [ 1146.771319][T15670] debugfs: 'hsr0' already exists in 'hsr' [ 1146.777264][T15670] Cannot create hsr debugfs directory [ 1147.484385][ T4117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.758301][ T4117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.934733][ T4117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.148037][ T4117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.394710][T15623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.749618][ T4117] bridge_slave_1: left allmulticast mode [ 1148.755535][ T4117] bridge_slave_1: left promiscuous mode [ 1148.762348][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.815594][ T4117] bridge_slave_0: left allmulticast mode [ 1148.821671][ T4117] bridge_slave_0: left promiscuous mode [ 1148.828485][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.563565][ T4117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.586193][ T4117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.611835][ T4117] bond0 (unregistering): Released all slaves [ 1149.863393][ T4117] tipc: Left network mode [ 1150.083939][ T3686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.092193][ T3686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.446947][ T4117] hsr_slave_0: left promiscuous mode [ 1150.522719][ T4117] hsr_slave_1: left promiscuous mode [ 1150.531143][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.539035][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.567361][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.575888][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.602288][ T4117] veth1_macvtap: left promiscuous mode [ 1150.617355][ T4117] veth0_macvtap: left promiscuous mode [ 1150.623508][ T4117] veth1_vlan: left promiscuous mode [ 1150.629132][ T4117] veth0_vlan: left promiscuous mode [ 1151.159182][ T4117] team0 (unregistering): Port device team_slave_1 removed [ 1151.278544][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.283212][ T4117] team0 (unregistering): Port device team_slave_0 removed [ 1151.285169][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.825904][T14638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.835253][T14638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.099017][T15644] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1152.223200][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.235270][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.305013][T15670] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1152.319744][T15644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1152.332565][T15644] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1152.342297][T15644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.420314][T15644] usb 6-1: config 0 descriptor?? [ 1152.428054][T15728] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1152.438743][ T3621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.446897][ T3621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.455731][T15670] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1152.597313][T15670] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1152.709574][T15670] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1152.973148][T15644] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1153.116434][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3604'. [ 1153.175386][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3604'. [ 1153.396838][T15623] veth0_vlan: entered promiscuous mode [ 1153.561165][T15623] veth1_vlan: entered promiscuous mode [ 1154.149619][T13598] usb 6-1: reset full-speed USB device number 18 using dummy_hcd [ 1154.443293][T15623] veth0_macvtap: entered promiscuous mode [ 1154.551455][T15623] veth1_macvtap: entered promiscuous mode [ 1154.704663][T15670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.964424][T15623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.994032][T15644] usb 6-1: USB disconnect, device number 18 [ 1155.064318][T15670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.141498][T15623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.235472][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.243117][ T1886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.339054][T13084] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.387768][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.395653][ T1886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.421093][T13084] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.497337][T13084] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.601518][T13084] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.778816][ T5871] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1156.038979][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.050377][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1156.062206][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1156.073652][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1156.083736][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1156.388043][ T5871] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1156.397652][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1156.406117][ T5871] usb 6-1: Product: syz [ 1156.410622][ T5871] usb 6-1: Manufacturer: syz [ 1156.415417][ T5871] usb 6-1: SerialNumber: syz [ 1156.633543][ T5871] usb 6-1: config 0 descriptor?? [ 1156.888943][ T5871] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1156.899711][ T5871] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1157.379303][ T5871] usb 6-1: USB disconnect, device number 19 [ 1158.464340][T15764] warning: `syz.5.3611' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1158.578741][T14669] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.694603][T14669] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.895676][T14669] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.066973][T14669] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.187528][T15670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.326930][T15767] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1159.871287][T14669] bridge_slave_1: left allmulticast mode [ 1159.877285][T14669] bridge_slave_1: left promiscuous mode [ 1159.884086][T14669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.040314][T14669] bridge_slave_0: left allmulticast mode [ 1160.046191][T14669] bridge_slave_0: left promiscuous mode [ 1160.053016][T14669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.611718][T14669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.687112][T14669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.735662][T14669] bond0 (unregistering): Released all slaves [ 1161.458412][T14669] hsr_slave_0: left promiscuous mode [ 1161.510645][T14669] hsr_slave_1: left promiscuous mode [ 1161.519374][T14669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.526953][T14669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.645235][T14669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.655408][T14669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.839317][T14669] veth1_macvtap: left promiscuous mode [ 1161.845147][T14669] veth0_macvtap: left promiscuous mode [ 1161.853702][T14669] veth1_vlan: left promiscuous mode [ 1161.859704][T14669] veth0_vlan: left promiscuous mode [ 1162.800704][T14669] team0 (unregistering): Port device team_slave_1 removed [ 1162.827451][T14669] team0 (unregistering): Port device team_slave_0 removed [ 1164.437617][T15670] veth0_vlan: entered promiscuous mode [ 1164.652820][T15670] veth1_vlan: entered promiscuous mode [ 1164.992470][T15670] veth0_macvtap: entered promiscuous mode [ 1165.109983][T15670] veth1_macvtap: entered promiscuous mode [ 1165.382542][T15670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.511271][T15670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.661030][ T1886] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.740584][ T1886] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.780986][ T1886] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.811542][ T1886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.434452][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.443005][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.558812][T15426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.568434][T15426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.023514][T14557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1170.034556][T14557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1170.051153][T14557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1170.067184][T14557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1170.081301][T14557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1170.618704][T10619] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1170.886146][T10619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1170.897864][T10619] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1170.907223][T10619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.996690][T10619] usb 6-1: config 0 descriptor?? [ 1171.004789][T15815] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1171.150932][T15812] chnl_net:caif_netlink_parms(): no params data found [ 1171.599285][T10619] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1171.723427][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3616'. [ 1171.840689][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3616'. [ 1172.130338][T14557] Bluetooth: hci0: command tx timeout [ 1172.443040][T10619] usb 6-1: USB disconnect, device number 20 [ 1173.189937][T15812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.197605][T15812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.205543][T15812] bridge_slave_0: entered allmulticast mode [ 1173.215339][T15812] bridge_slave_0: entered promiscuous mode [ 1173.352999][T15812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.363223][T15812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.371799][T15812] bridge_slave_1: entered allmulticast mode [ 1173.381571][T15812] bridge_slave_1: entered promiscuous mode [ 1173.432004][T15834] 9pnet_fd: Insufficient options for proto=fd [ 1173.568422][T14557] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1173.674635][T15812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.721462][T15812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.048598][T15812] team0: Port device team_slave_0 added [ 1174.100588][T15812] team0: Port device team_slave_1 added [ 1174.133749][T15426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.145446][T15426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.238960][T14557] Bluetooth: hci0: command tx timeout [ 1174.436061][T15812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.443466][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.474706][T15812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.531942][T13084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.540589][T13084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.603142][T15812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.610457][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.636987][T15812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.225463][T15812] hsr_slave_0: entered promiscuous mode [ 1175.236107][T15812] hsr_slave_1: entered promiscuous mode [ 1175.337532][ T3621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.558891][ T3621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.076811][ T3621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.298658][ T3621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.316400][T14557] Bluetooth: hci0: command tx timeout [ 1176.777292][ T3621] bridge_slave_1: left allmulticast mode [ 1176.784978][ T3621] bridge_slave_1: left promiscuous mode [ 1176.791709][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.867720][ T3621] bridge_slave_0: left allmulticast mode [ 1176.873836][ T3621] bridge_slave_0: left promiscuous mode [ 1176.881976][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.471725][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.509093][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.545276][ T3621] bond0 (unregistering): Released all slaves [ 1178.369810][T14557] Bluetooth: hci0: command tx timeout [ 1178.384432][ T3621] hsr_slave_0: left promiscuous mode [ 1178.430692][ T3621] hsr_slave_1: left promiscuous mode [ 1178.439075][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.452033][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.547487][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.555395][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.637286][ T3621] veth1_macvtap: left promiscuous mode [ 1178.643343][ T3621] veth0_macvtap: left promiscuous mode [ 1178.653645][ T3621] veth1_vlan: left promiscuous mode [ 1178.659428][ T3621] veth0_vlan: left promiscuous mode [ 1179.692288][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 1179.735835][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 1180.979441][T15812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1181.054537][T15812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1181.120732][T15812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1181.164350][T15812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1181.586169][T15871] 9pnet_fd: Insufficient options for proto=fd [ 1181.931979][T15812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.042677][T15812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.076046][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.083679][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.216778][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.224404][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.746811][T15875] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1182.761215][T15875] File: /dev/nullb0 PID: 15875 Comm: syz.7.3629 [ 1182.957836][T15882] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3630'. [ 1184.631433][T15812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.152032][T15812] veth0_vlan: entered promiscuous mode [ 1185.276584][T15812] veth1_vlan: entered promiscuous mode [ 1185.649981][T15812] veth0_macvtap: entered promiscuous mode [ 1185.704239][T15812] veth1_macvtap: entered promiscuous mode [ 1186.045780][T15812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.126520][T15812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.181280][T14638] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.192509][T14638] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.236174][T14638] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.305511][T14638] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.236267][T15901] 9pnet_fd: Insufficient options for proto=fd [ 1188.070122][T15909] 9pnet_fd: Insufficient options for proto=fd [ 1189.534096][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3641'. [ 1189.663432][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3641'. [ 1192.318771][ T1547] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1192.483694][T15940] 9pnet_fd: Insufficient options for proto=fd [ 1192.501606][ T1547] usb 6-1: Using ep0 maxpacket: 16 [ 1192.611389][ T1547] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1192.623347][ T1547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.632354][ T1547] usb 6-1: Product: syz [ 1192.637008][ T1547] usb 6-1: Manufacturer: syz [ 1192.642282][ T1547] usb 6-1: SerialNumber: syz [ 1192.753578][ T1547] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1192.761437][ T1547] r8152-cfgselector 6-1: config 0 descriptor?? [ 1193.551939][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1193.622696][ T1547] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 1194.511660][T14669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.523296][T14669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.705654][T15428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.713942][T15428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.318666][ T1547] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1195.520768][ T1547] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1195.533089][ T1547] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1195.547525][ T1547] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.626065][ T1547] usb 8-1: config 0 descriptor?? [ 1195.636367][T15961] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1196.201738][ T1547] elan 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1196.336782][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3652'. [ 1196.381038][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3652'. [ 1196.549012][ T1547] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1196.726373][ T1547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.739002][ T1547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.751430][ T1547] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1196.764791][ T1547] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1196.777562][ T1547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.818691][ T1547] usb 6-1: config 0 descriptor?? [ 1197.340872][ T1547] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1197.350122][ T1547] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1197.357721][ T1547] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1197.365533][ T1547] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1197.373238][ T1547] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1197.381077][ T1547] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1197.519576][ T1547] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1197.538796][ T1547] usb 6-1: USB disconnect, device number 22 [ 1198.134974][ T5871] usb 8-1: USB disconnect, device number 8 [ 1198.930828][T13598] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1199.109668][T13598] usb 2-1: Using ep0 maxpacket: 32 [ 1199.179670][T13598] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1199.189626][T13598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.197735][T13598] usb 2-1: Product: syz [ 1199.202434][T13598] usb 2-1: Manufacturer: syz [ 1199.207144][T13598] usb 2-1: SerialNumber: syz [ 1201.736733][T13598] usb 2-1: config 0 descriptor?? [ 1201.757321][T13598] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1201.893437][T12166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1201.904189][T12166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1201.920242][T12166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1201.982099][T12166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1202.025376][T12166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1202.223505][T13598] gspca_ov534_9: reg_w failed -71 [ 1202.481292][T15999] syzkaller0: entered promiscuous mode [ 1202.486912][T15999] syzkaller0: entered allmulticast mode [ 1202.638828][T13598] gspca_ov534_9: Unknown sensor 0000 [ 1202.639121][T13598] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1202.740630][T13598] usb 2-1: USB disconnect, device number 61 [ 1203.547299][T16008] 9pnet_fd: Insufficient options for proto=fd [ 1203.751054][T15995] chnl_net:caif_netlink_parms(): no params data found [ 1204.139210][T12166] Bluetooth: hci2: command tx timeout [ 1204.938867][T13598] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1205.127314][T13598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1205.139733][T13598] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1205.149969][T13598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.230410][T13598] usb 2-1: config 0 descriptor?? [ 1205.237298][T16020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1205.554858][T15995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.562749][T15995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.570767][T15995] bridge_slave_0: entered allmulticast mode [ 1205.587177][T15995] bridge_slave_0: entered promiscuous mode [ 1205.617421][T15995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.625389][T15995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.633319][T15995] bridge_slave_1: entered allmulticast mode [ 1205.643975][T15995] bridge_slave_1: entered promiscuous mode [ 1205.724395][T13598] elan 0003:04F3:0755.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1205.880907][T15995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.901242][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3669'. [ 1205.913718][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3669'. [ 1205.953042][T15995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.065952][T15995] team0: Port device team_slave_0 added [ 1206.086579][T15995] team0: Port device team_slave_1 added [ 1206.201508][T15995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.208869][T15995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.236253][T15995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.249172][T12166] Bluetooth: hci2: command tx timeout [ 1206.254353][T15995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.262253][T15995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.293131][T15995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.346529][T13598] usb 2-1: USB disconnect, device number 62 [ 1206.624496][T15995] hsr_slave_0: entered promiscuous mode [ 1206.634983][T15995] hsr_slave_1: entered promiscuous mode [ 1206.643428][T15995] debugfs: 'hsr0' already exists in 'hsr' [ 1206.649423][T15995] Cannot create hsr debugfs directory [ 1208.288416][T12166] Bluetooth: hci2: command tx timeout [ 1208.516596][T15995] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1208.577806][T15995] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1208.646962][T15995] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1208.763922][T15995] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1208.884610][T16038] sock: sock_timestamping_bind_phc: sock not bind to device [ 1210.249724][T15995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.368447][T12166] Bluetooth: hci2: command tx timeout [ 1210.381650][T16045] 9pnet_fd: Insufficient options for proto=fd [ 1210.465826][T15995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.544994][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.552573][T15428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.715336][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.722814][T15428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.709227][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.715873][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.943391][T15995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1213.120370][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3680'. [ 1213.200015][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3680'. [ 1215.649462][T14557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1215.681318][T14557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1215.707821][T14557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1215.744198][T14557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1215.789526][T14557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1215.844415][T15995] veth0_vlan: entered promiscuous mode [ 1215.941904][T15995] veth1_vlan: entered promiscuous mode [ 1216.068504][T15995] veth0_macvtap: entered promiscuous mode [ 1216.186011][T15995] veth1_macvtap: entered promiscuous mode [ 1216.481590][T15995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.599632][T15995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.708480][ T1886] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.748798][ T1886] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.757814][ T1886] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.859960][ T1886] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.001758][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 1217.071424][T16073] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1217.850350][T14638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.889616][T14557] Bluetooth: hci5: command tx timeout [ 1217.991634][T14638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.195853][T14638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.374299][T14638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.904745][T14638] bridge_slave_1: left allmulticast mode [ 1218.912368][T14638] bridge_slave_1: left promiscuous mode [ 1218.919023][T14638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.061092][T14638] bridge_slave_0: left allmulticast mode [ 1219.066991][T14638] bridge_slave_0: left promiscuous mode [ 1219.073961][T14638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.968845][T14557] Bluetooth: hci5: command tx timeout [ 1219.999326][T14638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.090182][T14638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.113589][T14638] bond0 (unregistering): Released all slaves [ 1220.198966][T16068] chnl_net:caif_netlink_parms(): no params data found [ 1222.039369][T12166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1222.081832][T12166] Bluetooth: hci5: command tx timeout [ 1222.087982][T12166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1222.103292][T12166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1222.122481][T12166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1222.135513][T14638] hsr_slave_0: left promiscuous mode [ 1222.154579][T12166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1222.200564][T14638] hsr_slave_1: left promiscuous mode [ 1222.207867][T14638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.216056][T14638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.392316][T14638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.400094][T14638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.484731][T14638] veth1_macvtap: left promiscuous mode [ 1222.491056][T14638] veth0_macvtap: left promiscuous mode [ 1222.496794][T14638] veth1_vlan: left promiscuous mode [ 1222.502321][T14638] veth0_vlan: left promiscuous mode [ 1223.317776][T14638] team0 (unregistering): Port device team_slave_1 removed [ 1223.405180][T14638] team0 (unregistering): Port device team_slave_0 removed [ 1224.070742][T16068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.079965][T16068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.087539][T16068] bridge_slave_0: entered allmulticast mode [ 1224.096104][T16068] bridge_slave_0: entered promiscuous mode [ 1224.128449][T12166] Bluetooth: hci5: command tx timeout [ 1224.210239][T12166] Bluetooth: hci3: command tx timeout [ 1224.364965][T16068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.374207][T16068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.381987][T16068] bridge_slave_1: entered allmulticast mode [ 1224.391106][T16068] bridge_slave_1: entered promiscuous mode [ 1225.010751][T14557] Bluetooth: hci1: command 0x0406 tx timeout [ 1225.176745][T16068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.453328][T12166] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1225.475462][T16068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.522701][T12166] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1225.532255][T12166] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1225.550135][T12166] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1225.562244][T12166] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1225.625890][T16068] team0: Port device team_slave_0 added [ 1225.643836][T16068] team0: Port device team_slave_1 added [ 1225.735377][T16068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.742725][T16068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.773210][T16068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.797275][T16068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.807512][T16068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.834460][T16068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.965145][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1226.061403][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1226.119749][T16068] hsr_slave_0: entered promiscuous mode [ 1226.139378][T16068] hsr_slave_1: entered promiscuous mode [ 1226.147512][T16068] debugfs: 'hsr0' already exists in 'hsr' [ 1226.153683][T16068] Cannot create hsr debugfs directory [ 1226.235336][T16089] chnl_net:caif_netlink_parms(): no params data found [ 1226.288459][T12166] Bluetooth: hci3: command tx timeout [ 1227.810020][T12166] Bluetooth: hci7: command tx timeout [ 1228.368586][T12166] Bluetooth: hci3: command tx timeout [ 1228.493920][T12166] Bluetooth: hci1: unexpected cc 0x2041 length: 0 < 1 [ 1228.501064][T12166] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 1228.583947][T16101] chnl_net:caif_netlink_parms(): no params data found [ 1228.605494][T16089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.615542][T16089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.627009][T16089] bridge_slave_0: entered allmulticast mode [ 1228.635754][T16089] bridge_slave_0: entered promiscuous mode [ 1228.825616][T16089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.833146][T16089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.840896][T16089] bridge_slave_1: entered allmulticast mode [ 1228.850121][T16089] bridge_slave_1: entered promiscuous mode [ 1229.253818][T16089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.273541][T16068] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1229.391952][T16089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.461807][T16068] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1229.607471][T16068] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1229.829018][T16068] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1229.888422][T12166] Bluetooth: hci7: command tx timeout [ 1229.915415][T16089] team0: Port device team_slave_0 added [ 1230.026227][T16089] team0: Port device team_slave_1 added [ 1230.448380][T12166] Bluetooth: hci3: command tx timeout [ 1230.683477][T16089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.690729][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1230.717155][T16089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.845984][T16101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.855675][T16101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.863450][T16101] bridge_slave_0: entered allmulticast mode [ 1230.876440][T16101] bridge_slave_0: entered promiscuous mode [ 1230.977193][T16089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.984635][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.011165][T16089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.131330][T16101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.139680][T16101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.147513][T16101] bridge_slave_1: entered allmulticast mode [ 1231.157546][T16101] bridge_slave_1: entered promiscuous mode [ 1231.782460][T16089] hsr_slave_0: entered promiscuous mode [ 1231.798294][T16089] hsr_slave_1: entered promiscuous mode [ 1231.806205][T16089] debugfs: 'hsr0' already exists in 'hsr' [ 1231.812237][T16089] Cannot create hsr debugfs directory [ 1231.913458][T16101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.968533][T12166] Bluetooth: hci7: command tx timeout [ 1232.143959][T16101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.697675][T16101] team0: Port device team_slave_0 added [ 1232.767909][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3697'. [ 1232.785524][T16101] team0: Port device team_slave_1 added [ 1232.852448][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3697'. [ 1232.901685][ T1886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.909863][ T1886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.099619][T16101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.106677][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.136148][T16101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.435766][T16101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.443083][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.469900][T16101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.528928][ T3686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.540853][ T3686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.049072][T12166] Bluetooth: hci7: command tx timeout [ 1234.393343][T16101] hsr_slave_0: entered promiscuous mode [ 1234.402470][T16101] hsr_slave_1: entered promiscuous mode [ 1234.410481][T16101] debugfs: 'hsr0' already exists in 'hsr' [ 1234.416299][T16101] Cannot create hsr debugfs directory [ 1234.751144][T16145] 9pnet_fd: Insufficient options for proto=fd [ 1235.091666][T16089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1235.258793][T16089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1235.362970][T16089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1235.427618][T16068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.472682][T16089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1235.674416][T16149] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1235.874165][T16068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.134671][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.142193][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.324019][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.331477][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.376306][T16101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1238.485458][T16101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1238.566247][T16101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1238.761635][T16101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1239.133251][T16089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.399116][T16089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.526561][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.534247][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.707147][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.714641][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.959034][T16170] 9pnet_fd: Insufficient options for proto=fd [ 1240.682238][T16068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.874984][T16101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.269114][T16178] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1241.311648][T16101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.535612][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.545303][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.731558][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.739030][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.056395][T16101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.180514][T16089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.829131][T16089] veth0_vlan: entered promiscuous mode [ 1245.839859][T16210] 9pnet_fd: Insufficient options for proto=fd [ 1245.952307][T16089] veth1_vlan: entered promiscuous mode [ 1246.461335][T16089] veth0_macvtap: entered promiscuous mode [ 1246.571788][T16089] veth1_macvtap: entered promiscuous mode [ 1246.865620][T16089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.069817][T16089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.229718][ T3491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.337240][T16101] veth0_vlan: entered promiscuous mode [ 1247.404554][ T3491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.512658][T14638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.592581][T16171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.644433][T16101] veth1_vlan: entered promiscuous mode [ 1247.960229][T16068] veth0_vlan: entered promiscuous mode [ 1248.185945][T16068] veth1_vlan: entered promiscuous mode [ 1248.306181][T16101] veth0_macvtap: entered promiscuous mode [ 1248.492075][T16101] veth1_macvtap: entered promiscuous mode [ 1248.541632][T16222] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1248.716187][T16068] veth0_macvtap: entered promiscuous mode [ 1248.865933][T16068] veth1_macvtap: entered promiscuous mode [ 1249.069544][T16101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.269876][T16068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.285497][T16101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.451456][ T1886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.496885][T16068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.569039][ T1886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.687724][T14638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.968962][T16171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.978016][T16171] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.049797][T16171] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.161183][T13084] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.248003][T13084] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.584513][T16248] 9pnet_fd: Insufficient options for proto=fd [ 1252.779912][T13598] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1253.072278][T13598] usb 10-1: Using ep0 maxpacket: 32 [ 1253.120324][T13598] usb 10-1: config 0 has an invalid interface number: 250 but max is 2 [ 1253.128972][T13598] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.139450][T13598] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1253.148689][T13598] usb 10-1: config 0 has no interface number 0 [ 1253.412034][T13598] usb 10-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1253.421634][T13598] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.429998][T13598] usb 10-1: Product: syz [ 1253.434371][T13598] usb 10-1: Manufacturer: syz [ 1253.439492][T13598] usb 10-1: SerialNumber: syz [ 1253.619379][T13598] usb 10-1: config 0 descriptor?? [ 1253.893189][T13598] usb 10-1: USB disconnect, device number 4 [ 1254.914966][T15428] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.293624][T15428] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.544108][T15428] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.844535][T16266] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1255.986572][T15428] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.939201][T15428] bridge_slave_1: left allmulticast mode [ 1259.945005][T15428] bridge_slave_1: left promiscuous mode [ 1259.959861][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.198416][T15428] bridge_slave_0: left allmulticast mode [ 1260.204198][T15428] bridge_slave_0: left promiscuous mode [ 1260.210644][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.161002][T15428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.212408][T15428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.229783][T15428] bond0 (unregistering): Released all slaves [ 1262.131350][T15428] hsr_slave_0: left promiscuous mode [ 1262.160961][T15428] hsr_slave_1: left promiscuous mode [ 1262.169300][T15428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.176893][T15428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.200476][T15428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.213739][T15428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.246945][T15428] veth1_macvtap: left promiscuous mode [ 1262.253332][T15428] veth0_macvtap: left promiscuous mode [ 1262.259449][T15428] veth1_vlan: left promiscuous mode [ 1262.264993][T15428] veth0_vlan: left promiscuous mode [ 1262.688557][T14921] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1262.866750][T14921] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1262.949562][T14921] usb 10-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 1262.959280][T14921] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.967588][T14921] usb 10-1: Product: syz [ 1262.972243][T14921] usb 10-1: Manufacturer: syz [ 1262.977110][T14921] usb 10-1: SerialNumber: syz [ 1262.999883][T14921] usb 10-1: config 0 descriptor?? [ 1263.019288][T15428] team0 (unregistering): Port device team_slave_1 removed [ 1263.057762][T15428] team0 (unregistering): Port device team_slave_0 removed [ 1263.288996][T14921] usb 10-1: USB disconnect, device number 5 [ 1263.942809][T15428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.175843][T15428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.393960][T15428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.137735][T15428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.306001][ T1886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.314779][ T1886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.389036][T15428] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.603728][T15428] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.709345][T13084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.717493][T13084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.737171][T15426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.745581][T15426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.802199][T15428] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.003555][T15428] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.143071][ T3621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.152250][ T3621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.536062][T15428] bridge_slave_1: left allmulticast mode [ 1269.542496][T15428] bridge_slave_1: left promiscuous mode [ 1269.549337][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.770600][T15428] bridge_slave_0: left allmulticast mode [ 1269.776478][T15428] bridge_slave_0: left promiscuous mode [ 1269.791568][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.859155][T15428] bridge_slave_1: left allmulticast mode [ 1269.865030][T15428] bridge_slave_1: left promiscuous mode [ 1269.871343][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.920722][T15428] bridge_slave_0: left allmulticast mode [ 1269.926901][T15428] bridge_slave_0: left promiscuous mode [ 1269.933424][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.672284][T15428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.751072][T15428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.775047][T15428] bond0 (unregistering): Released all slaves [ 1271.162460][T15428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.212247][T15428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.287204][T15428] bond0 (unregistering): Released all slaves [ 1271.460062][T15426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.468510][T15426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.563104][T14921] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1271.632153][T14669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.640496][T14669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.755054][T14921] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.850221][T14921] usb 10-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 1271.859814][T14921] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.868318][T14921] usb 10-1: Product: syz [ 1271.872855][T14921] usb 10-1: Manufacturer: syz [ 1271.877730][T14921] usb 10-1: SerialNumber: syz [ 1271.974738][T14921] usb 10-1: config 0 descriptor?? [ 1272.200341][T14921] usb 10-1: USB disconnect, device number 6 [ 1272.887895][T15428] hsr_slave_0: left promiscuous mode [ 1272.938791][T15428] hsr_slave_1: left promiscuous mode [ 1272.946825][T15428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.961204][T15428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.032081][T15428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.039993][T15428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.117570][T15428] hsr_slave_0: left promiscuous mode [ 1273.182106][T15428] hsr_slave_1: left promiscuous mode [ 1273.190338][T15428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.197942][T15428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.282051][T15428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.289949][T15428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.536291][T15428] veth1_macvtap: left promiscuous mode [ 1273.542170][T15428] veth0_macvtap: left promiscuous mode [ 1273.548296][T15428] veth1_vlan: left promiscuous mode [ 1273.553961][T15428] veth0_vlan: left promiscuous mode [ 1273.806521][T15428] veth1_macvtap: left promiscuous mode [ 1273.812542][T15428] veth0_macvtap: left promiscuous mode [ 1273.818670][T15428] veth1_vlan: left promiscuous mode [ 1273.824223][T15428] veth0_vlan: left promiscuous mode [ 1274.682895][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.689827][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1278.410851][T15428] team0 (unregistering): Port device team_slave_1 removed [ 1278.436593][T15428] team0 (unregistering): Port device team_slave_0 removed [ 1279.566379][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3753'. [ 1279.780741][T15428] team0 (unregistering): Port device team_slave_1 removed [ 1279.808754][T15428] team0 (unregistering): Port device team_slave_0 removed [ 1282.051621][T16391] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.057732][T16391] binder: 16389:16391 ioctl 4018620d 80000040 returned -16 [ 1287.406187][T14557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1287.416694][T14557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1287.427997][T14557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1287.452383][T14557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1287.465726][T14557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1288.959459][T16400] chnl_net:caif_netlink_parms(): no params data found [ 1289.568575][T14557] Bluetooth: hci0: command tx timeout [ 1290.456235][T16400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.464187][T16400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.475473][T16400] bridge_slave_0: entered allmulticast mode [ 1290.484099][T16400] bridge_slave_0: entered promiscuous mode [ 1290.700234][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.707648][T16400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.715455][T16400] bridge_slave_1: entered allmulticast mode [ 1290.724318][T16400] bridge_slave_1: entered promiscuous mode [ 1291.026370][T16400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.062061][T16400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.500187][T16400] team0: Port device team_slave_0 added [ 1291.556820][T16400] team0: Port device team_slave_1 added [ 1291.668587][T14557] Bluetooth: hci0: command tx timeout [ 1291.793199][T16400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.803778][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.832359][T16400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.943381][T16400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.950847][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.977462][T16400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.271641][T16400] hsr_slave_0: entered promiscuous mode [ 1292.281134][T16400] hsr_slave_1: entered promiscuous mode [ 1293.724495][T12166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1293.737589][T12166] Bluetooth: hci0: command tx timeout [ 1293.755989][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1293.768794][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1293.815713][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1293.827843][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1294.967676][T16400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1295.255018][T16400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1295.410085][T16400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1295.551771][T16400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1295.821285][ T5816] Bluetooth: hci0: command tx timeout [ 1295.890052][ T5816] Bluetooth: hci4: command tx timeout [ 1296.461507][T15644] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1296.699147][T15644] usb 4-1: Using ep0 maxpacket: 32 [ 1296.753862][T15644] usb 4-1: config 0 has an invalid interface number: 250 but max is 2 [ 1296.762797][T15644] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.774012][T15644] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1296.783133][T15644] usb 4-1: config 0 has no interface number 0 [ 1296.799509][T16416] chnl_net:caif_netlink_parms(): no params data found [ 1296.971449][T15644] usb 4-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1296.981052][T15644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.989299][T15644] usb 4-1: Product: syz [ 1296.993564][T15644] usb 4-1: Manufacturer: syz [ 1296.998380][T15644] usb 4-1: SerialNumber: syz [ 1297.133140][T15644] usb 4-1: config 0 descriptor?? [ 1297.352546][T15644] usb 4-1: USB disconnect, device number 29 [ 1297.968645][ T5816] Bluetooth: hci4: command tx timeout [ 1298.462523][T16400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.758415][T16400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.898798][ T3943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.906175][ T3943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.026315][ T3943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.033781][ T3943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.142635][T14557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1299.165084][T14557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1299.181277][T14557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1299.195309][T14557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1299.212646][T14557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1300.228178][ T5816] Bluetooth: hci4: command tx timeout [ 1302.381505][T14557] Bluetooth: hci6: command tx timeout [ 1302.388264][T14557] Bluetooth: hci4: command tx timeout [ 1302.514389][T16416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.522158][T16416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.530211][T16416] bridge_slave_0: entered allmulticast mode [ 1302.540202][T16416] bridge_slave_0: entered promiscuous mode [ 1302.572376][T16416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.580161][T16416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.587953][T16416] bridge_slave_1: entered allmulticast mode [ 1302.597979][T16416] bridge_slave_1: entered promiscuous mode [ 1303.158964][T16416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.279823][T16416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.274049][T16416] team0: Port device team_slave_0 added [ 1304.407776][T16416] team0: Port device team_slave_1 added [ 1304.460093][T16444] Bluetooth: hci6: command tx timeout [ 1304.574333][T16435] chnl_net:caif_netlink_parms(): no params data found [ 1305.152400][T16400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.244137][T16416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.254782][T16416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.282647][T16416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.452526][T16416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.461072][T16416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.487517][T16416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.971620][T16416] hsr_slave_0: entered promiscuous mode [ 1305.980858][T16416] hsr_slave_1: entered promiscuous mode [ 1305.989050][T16416] debugfs: 'hsr0' already exists in 'hsr' [ 1305.994887][T16416] Cannot create hsr debugfs directory [ 1306.529200][T16444] Bluetooth: hci6: command tx timeout [ 1308.025009][T16400] veth0_vlan: entered promiscuous mode [ 1308.067364][T16435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.075026][T16435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.088380][T16435] bridge_slave_0: entered allmulticast mode [ 1308.097078][T16435] bridge_slave_0: entered promiscuous mode [ 1308.201284][T16435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.209297][T16435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.217009][T16435] bridge_slave_1: entered allmulticast mode [ 1308.225850][T16435] bridge_slave_1: entered promiscuous mode [ 1308.277984][T16400] veth1_vlan: entered promiscuous mode [ 1308.615120][T16444] Bluetooth: hci6: command tx timeout [ 1309.087554][T16435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.154912][T16400] veth0_macvtap: entered promiscuous mode [ 1309.314762][T16435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.332437][T16400] veth1_macvtap: entered promiscuous mode [ 1309.449529][T16400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.536085][T16400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.587395][T13084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.757807][T16171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.029314][T16171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.042212][T16171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.060017][T16416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1310.259022][T16416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1310.291676][T16435] team0: Port device team_slave_0 added [ 1310.353300][T16416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1310.496334][T16435] team0: Port device team_slave_1 added [ 1310.512154][T16416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1310.993602][T16435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.000829][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.027325][T16435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.433770][T16435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.441212][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.470917][T16435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.465233][T16435] hsr_slave_0: entered promiscuous mode [ 1312.474303][T16435] hsr_slave_1: entered promiscuous mode [ 1312.488785][T16435] debugfs: 'hsr0' already exists in 'hsr' [ 1312.494648][T16435] Cannot create hsr debugfs directory [ 1313.870524][T16416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.209256][T16416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.494779][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.502265][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.685490][T14638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.693020][T14638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.168819][T16435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1315.339512][T16435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1315.487510][T16435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1315.581028][T16435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1317.586438][T16435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.899583][T16435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.032083][T13084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.039586][T13084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.270181][T13084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.277546][T13084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.726986][T16416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.355985][T12166] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1322.369904][T12166] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1322.381574][T12166] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1322.398702][T12166] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1322.409994][T12166] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1322.591583][T16435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.754874][ T3943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.763268][ T3943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.106176][ T3943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.114298][ T3943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.544080][T16416] veth0_vlan: entered promiscuous mode [ 1324.615782][T12166] Bluetooth: hci8: command tx timeout [ 1324.983386][T16416] veth1_vlan: entered promiscuous mode [ 1325.377284][T16416] veth0_macvtap: entered promiscuous mode [ 1325.632534][T16416] veth1_macvtap: entered promiscuous mode [ 1325.941558][T16416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.188860][T16416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.392982][T16171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.480974][T14669] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.552750][T14669] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.690407][T16444] Bluetooth: hci8: command tx timeout [ 1326.724187][ T4117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.429369][T16444] Bluetooth: hci2: command 0x0406 tx timeout [ 1327.555888][T16515] chnl_net:caif_netlink_parms(): no params data found [ 1327.713076][T16435] veth0_vlan: entered promiscuous mode [ 1327.885629][T16435] veth1_vlan: entered promiscuous mode [ 1328.492723][T16435] veth0_macvtap: entered promiscuous mode [ 1328.723911][T16435] veth1_macvtap: entered promiscuous mode [ 1328.778300][T16444] Bluetooth: hci8: command tx timeout [ 1329.369659][T13598] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1329.580339][T16435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.629425][T13598] usb 1-1: Using ep0 maxpacket: 32 [ 1329.693260][T13598] usb 1-1: config 0 has an invalid interface number: 250 but max is 2 [ 1329.701880][T13598] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.713263][T13598] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1329.722405][T13598] usb 1-1: config 0 has no interface number 0 [ 1329.779052][T16435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.026865][T13084] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.073935][T13598] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1330.084140][T13598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.092882][T13598] usb 1-1: Product: syz [ 1330.101698][T13598] usb 1-1: Manufacturer: syz [ 1330.106424][T13598] usb 1-1: SerialNumber: syz [ 1330.151685][T13084] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.229266][T13084] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.279251][T13084] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.295691][T13598] usb 1-1: config 0 descriptor?? [ 1330.615967][T13598] usb 1-1: USB disconnect, device number 59 [ 1330.848605][T16444] Bluetooth: hci8: command tx timeout [ 1330.990116][T15428] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.279308][T15428] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.674075][T15428] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.033128][T15428] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.918465][ T1547] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1332.930337][T16515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.937821][T16515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.945690][T16515] bridge_slave_0: entered allmulticast mode [ 1332.954627][T16515] bridge_slave_0: entered promiscuous mode [ 1332.977115][T15428] bridge_slave_1: left allmulticast mode [ 1332.984223][T15428] bridge_slave_1: left promiscuous mode [ 1332.990856][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.089945][T15428] bridge_slave_0: left allmulticast mode [ 1333.095943][T15428] bridge_slave_0: left promiscuous mode [ 1333.105315][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.155823][ T1547] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1333.164270][ T1547] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1333.179164][ T1547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.261341][ T1547] usb 1-1: config 0 descriptor?? [ 1333.851164][T15428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.875194][T15428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.903965][T15428] bond0 (unregistering): Released all slaves [ 1333.930448][T16515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.938275][T16515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.946195][T16515] bridge_slave_1: entered allmulticast mode [ 1333.956169][T16515] bridge_slave_1: entered promiscuous mode [ 1333.978331][ T1547] isku 0003:1E7D:3264.001B: unknown main item tag 0x0 [ 1333.993065][ T1547] isku 0003:1E7D:3264.001B: unknown main item tag 0x0 [ 1334.001635][ T1547] isku 0003:1E7D:3264.001B: unknown main item tag 0x0 [ 1334.008739][ T1547] isku 0003:1E7D:3264.001B: unknown main item tag 0x0 [ 1334.015680][ T1547] isku 0003:1E7D:3264.001B: unknown main item tag 0x0 [ 1334.022762][ T1547] isku 0003:1E7D:3264.001B: unknown main item tag 0x0 [ 1334.029846][ T1547] isku 0003:1E7D:3264.001B: unknown main item tag 0x0 [ 1334.287317][ T1547] isku 0003:1E7D:3264.001B: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.0-1/input0 [ 1334.470822][ T1547] usb 1-1: USB disconnect, device number 60 [ 1335.074592][T16515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.597106][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.604312][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.673460][T16515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.925536][T15428] hsr_slave_0: left promiscuous mode [ 1336.006913][T15428] hsr_slave_1: left promiscuous mode [ 1336.014402][T15428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1336.022139][T15428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.159108][T15428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1336.166678][T15428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1336.390105][T15428] veth1_macvtap: left promiscuous mode [ 1336.395927][T15428] veth0_macvtap: left promiscuous mode [ 1336.401790][T15428] veth1_vlan: left promiscuous mode [ 1336.407209][T15428] veth0_vlan: left promiscuous mode [ 1337.500768][T15428] team0 (unregistering): Port device team_slave_1 removed [ 1337.666381][T15428] team0 (unregistering): Port device team_slave_0 removed [ 1338.941585][T16515] team0: Port device team_slave_0 added [ 1339.175939][T16515] team0: Port device team_slave_1 added [ 1339.786453][T16515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.794234][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.821772][T16515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.969882][ T3621] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.123335][T16515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.136128][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.163779][T16515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.468739][ T3621] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.661208][ T3621] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.038937][ T3621] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.128509][ T1547] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1341.221586][T16515] hsr_slave_0: entered promiscuous mode [ 1341.231021][T16515] hsr_slave_1: entered promiscuous mode [ 1341.242206][T16515] debugfs: 'hsr0' already exists in 'hsr' [ 1341.248844][T16515] Cannot create hsr debugfs directory [ 1341.347887][ T1547] usb 1-1: Using ep0 maxpacket: 32 [ 1341.374022][ T1547] usb 1-1: config 0 has an invalid interface number: 250 but max is 2 [ 1341.382824][ T1547] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.394047][ T1547] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1341.403657][ T1547] usb 1-1: config 0 has no interface number 0 [ 1341.589174][ T1547] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1341.599137][ T1547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.607333][ T1547] usb 1-1: Product: syz [ 1341.611810][ T1547] usb 1-1: Manufacturer: syz [ 1341.616609][ T1547] usb 1-1: SerialNumber: syz [ 1341.710591][ T1547] usb 1-1: config 0 descriptor?? [ 1341.961234][ T1547] usb 1-1: USB disconnect, device number 61 [ 1342.060064][T16444] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1342.066749][ T3621] bridge_slave_1: left allmulticast mode [ 1342.068828][T16444] Bluetooth: hci0: Injecting HCI hardware error event [ 1342.082729][ T3621] bridge_slave_1: left promiscuous mode [ 1342.092531][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.102888][T16444] Bluetooth: hci0: hardware error 0x00 [ 1342.202810][ T3621] bridge_slave_0: left allmulticast mode [ 1342.209726][ T3621] bridge_slave_0: left promiscuous mode [ 1342.216297][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.754917][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.775528][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.810489][ T3621] bond0 (unregistering): Released all slaves [ 1343.370978][T12166] ===================================================== [ 1343.378772][T12166] BUG: KMSAN: uninit-value in hci_cmd_complete_evt+0xca3/0xe90 [ 1343.386673][T12166] hci_cmd_complete_evt+0xca3/0xe90 [ 1343.392263][T12166] hci_event_packet+0xce2/0x1e40 [ 1343.397429][T12166] hci_rx_work+0x9a8/0x12b0 [ 1343.402179][T12166] process_scheduled_works+0xb8e/0x1d80 [ 1343.410646][T12166] worker_thread+0xedf/0x1590 [ 1343.415584][T12166] kthread+0xd59/0xf00 [ 1343.421038][T12166] ret_from_fork+0x1e3/0x310 [ 1343.426313][T12166] ret_from_fork_asm+0x1a/0x30 [ 1343.431421][T12166] [ 1343.433833][T12166] Uninit was stored to memory at: [ 1343.439173][T12166] hci_cmd_complete_evt+0xc9c/0xe90 [ 1343.444521][T12166] hci_event_packet+0xce2/0x1e40 [ 1343.450013][T12166] hci_rx_work+0x9a8/0x12b0 [ 1343.454700][T12166] process_scheduled_works+0xb8e/0x1d80 [ 1343.460580][T12166] worker_thread+0xedf/0x1590 [ 1343.465494][T12166] kthread+0xd59/0xf00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1343.471210][T12166] ret_from_fork+0x1e3/0x310 [ 1343.476052][T12166] ret_from_fork_asm+0x1a/0x30 [ 1343.482347][T12166] [ 1343.484879][T12166] Uninit was stored to memory at: [ 1343.490211][T12166] hci_cmd_complete_evt+0x775/0xe90 [ 1343.495582][T12166] hci_event_packet+0xce2/0x1e40 [ 1343.500902][T12166] hci_rx_work+0x9a8/0x12b0 [ 1343.505581][T12166] process_scheduled_works+0xb8e/0x1d80 [ 1343.514432][T12166] worker_thread+0xedf/0x1590 [ 1343.520558][T12166] kthread+0xd59/0xf00 [ 1343.524815][T12166] ret_from_fork+0x1e3/0x310 [ 1343.529698][T12166] ret_from_fork_asm+0x1a/0x30 [ 1343.534722][T12166] [ 1343.537132][T12166] Uninit was created at: [ 1343.541755][T12166] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1343.547892][T12166] kmalloc_reserve+0x13c/0x4b0 [ 1343.552984][T12166] __alloc_skb+0x347/0x7d0 [ 1343.557572][T12166] vhci_write+0x125/0x960 [ 1343.562243][T12166] vfs_write+0xbdf/0x15d0 [ 1343.566846][T12166] __ia32_sys_write+0x1f9/0x4d0 [ 1343.572234][T12166] ia32_sys_call+0x35bc/0x4310 [ 1343.577266][T12166] __do_fast_syscall_32+0xb0/0x150 [ 1343.582807][T12166] do_fast_syscall_32+0x38/0x80 [ 1343.587876][T12166] do_SYSENTER_32+0x1f/0x30 [ 1343.592691][T12166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1343.599323][T12166] [ 1343.601778][T12166] CPU: 1 UID: 0 PID: 12166 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(none) [ 1343.614374][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1343.625521][T12166] Workqueue: hci0 hci_rx_work [ 1343.630590][T12166] ===================================================== [ 1343.637629][T12166] Disabling lock debugging due to kernel taint [ 1343.644206][T12166] Kernel panic - not syncing: kmsan.panic set ... [ 1343.650790][T12166] CPU: 1 UID: 0 PID: 12166 Comm: kworker/u9:0 Tainted: G B syzkaller #0 PREEMPT(none) [ 1343.662143][T12166] Tainted: [B]=BAD_PAGE [ 1343.666411][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1343.676633][T12166] Workqueue: hci0 hci_rx_work [ 1343.681535][T12166] Call Trace: [ 1343.684955][T12166] [ 1343.687990][T12166] __dump_stack+0x26/0x30 [ 1343.692538][T12166] dump_stack_lvl+0x53/0x270 [ 1343.697349][T12166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1343.703376][T12166] dump_stack+0x1e/0x25 [ 1343.707764][T12166] vpanic+0x361/0xc50 [ 1343.711995][T12166] panic+0x15d/0x160 [ 1343.716195][T12166] kmsan_report+0x31c/0x320 [ 1343.720949][T12166] ? __msan_warning+0x1b/0x30 [ 1343.725805][T12166] ? hci_cmd_complete_evt+0xca3/0xe90 [ 1343.731382][T12166] ? hci_event_packet+0xce2/0x1e40 [ 1343.736736][T12166] ? hci_rx_work+0x9a8/0x12b0 [ 1343.741588][T12166] ? process_scheduled_works+0xb8e/0x1d80 [ 1343.747550][T12166] ? worker_thread+0xedf/0x1590 [ 1343.752631][T12166] ? kthread+0xd59/0xf00 [ 1343.757057][T12166] ? ret_from_fork+0x1e3/0x310 [ 1343.762009][T12166] ? ret_from_fork_asm+0x1a/0x30 [ 1343.767180][T12166] ? ret_from_fork_asm+0x1a/0x30 [ 1343.772337][T12166] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1343.778879][T12166] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1343.785254][T12166] ? work_grab_pending+0x5e3/0x1100 [ 1343.790654][T12166] ? stack_depot_save_flags+0x35/0x7b0 [ 1343.796359][T12166] ? kmsan_get_metadata+0xfb/0x160 [ 1343.801694][T12166] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1343.808221][T12166] ? kmsan_get_metadata+0xfb/0x160 [ 1343.813532][T12166] ? kmsan_get_metadata+0xfb/0x160 [ 1343.818842][T12166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1343.824896][T12166] ? kmsan_get_metadata+0xfb/0x160 [ 1343.830246][T12166] __msan_warning+0x1b/0x30 [ 1343.834937][T12166] hci_cmd_complete_evt+0xca3/0xe90 [ 1343.840390][T12166] hci_event_packet+0xce2/0x1e40 [ 1343.845576][T12166] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 1343.851566][T12166] hci_rx_work+0x9a8/0x12b0 [ 1343.856307][T12166] ? __pfx_hci_rx_work+0x10/0x10 [ 1343.861425][T12166] process_scheduled_works+0xb8e/0x1d80 [ 1343.867326][T12166] worker_thread+0xedf/0x1590 [ 1343.872320][T12166] kthread+0xd59/0xf00 [ 1343.876566][T12166] ? __pfx_worker_thread+0x10/0x10 [ 1343.881957][T12166] ? __pfx_kthread+0x10/0x10 [ 1343.886745][T12166] ret_from_fork+0x1e3/0x310 [ 1343.891527][T12166] ? __pfx_kthread+0x10/0x10 [ 1343.896313][T12166] ret_from_fork_asm+0x1a/0x30 [ 1343.901369][T12166] [ 1343.904787][T12166] Kernel Offset: disabled [ 1343.909188][T12166] Rebooting in 86400 seconds..