last executing test programs: 5.201119245s ago: executing program 3 (id=4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000240)={0x0, 0xab12, 0x0, 0xffffffff, 0x5}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f0000000080)=0xfffffffe, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000740)=""/234, 0xea}], 0x3e8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r0, 0x3) (async) syz_io_uring_setup(0x88f, &(0x7f0000000240)={0x0, 0xab12, 0x0, 0xffffffff, 0x5}, &(0x7f00000001c0), &(0x7f0000000140)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f0000000080)=0xfffffffe, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000740)=""/234, 0xea}], 0x3e8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) (async) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) (async) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) 5.027413114s ago: executing program 3 (id=6): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x7, 0x5, {0x5, 0x24, "8c0ef4"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0x15, 0xa2, "00da851265446c01a8787f0639fe9a8950e05a44598e7452071698c9c31473d7a551c4991464a32bd01c08a2fd30b5e6d2f1ee181c27f7a9ebf870416b8045607d61fb4e4378b59e77523d272980041f85b3721a4150842d3aa3f7df6d88b05553b5bde6aa036a57e3d567b641b6aa710190cae59cfe7651c43de0ada15979c1a520013a96f20b955250b82a0cded2a30f0d698106bc7d9bf10178a81775c0ec2d0d"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x66, 0x3, 0x2, 0xfff8, 0x8, 0x4, 0x4, 0x9, 0x30, 0xf, 0x3, 0x2}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000540)={0x0, 0x3, 0x1, "d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000f00)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.12302645s ago: executing program 4 (id=5): r0 = shmget$private(0x0, 0x3000, 0x16001b20, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x65) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, &(0x7f0000000300)={0x20, 0x0, 0x5, {0x5, 0x0, "821f00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="618802"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f0000000040)={0x14, &(0x7f00000000c0)={0x20, 0x8, 0x44, {0x44, 0x5, "345030d52bf39021fa7a2ee30c8831fef568c20ebef872689b0de32f1153db44cbd19ba37b548305f33feacb05fbdddc97d8d9ea3917cc8cad969b4ed0e27b17ce69"}}, &(0x7f0000000440)={0x0, 0x3, 0x51, @string={0x51, 0x3, "0980a4b58f9ad370c653a0771a9ca01a088baca44b8108b000bd472535e6b362902eb9c301009544efefd4e4cc9994fe45aa377a9396f20d664fe660f9df038343614f4d7197ba955ccac866db898d"}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x16, 0x53, "822d22d507d68cdd5cc4fb3a43dbc8f0ca275cf46f888192827026b60132ba4061511d2ecfe51754062f78f25d3f11b3e4bd79294035a57a63ae6436c8875a22c3b0503b64e3fa5b06517e82eb22afc6aacd74"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x4a, {0x48, "e9e4b5426f9bba1ac33e861c78cf1a037e6845a0a0e3e8f53f7bd766682d712a2bf892ef9c592ba97e945ad09d804715d1eb503a7b68e6e714769c7daca8bde19d7d1e9e1af05968"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x44}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0xf8}}) 3.733162196s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delneigh={0x58, 0x1d, 0x800, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x8, 0x10, 0x1}, [@NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_CACHEINFO={0x14, 0x3, {0x7f, 0x0, 0x10000, 0xfffffff4}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8}, @NDA_PROBES={0x8, 0x4, 0x5}, @NDA_VNI={0x8, 0x7, 0x5}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040890}, 0x4090) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.405152274s ago: executing program 2 (id=11): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x100}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x6, 0x50, {0x50, 0x11, "bb440d2abd9de61828153817ad1b1e4c618f88c18c6ddb5fdf2008d8ad9614ab6d594312051ed8050f28861d93edc487a54f576b5973bbd9a5a50c009b4cff633c120a31a8cd84b240128959cfb6"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5, 0x0, [@ext_cap={0x0, 0x10, 0x2, 0x10, 0x2, 0x3, 0xa000}, @ss_container_id={0x0, 0x10, 0x4, 0x2, "8e5ae1e43af26f438f7596c426f6bec0"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfd, 0x3, 0x42, 0x6, "d9c544b7", "16aa839e"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0xae, 0x4, 0x9, 0x4, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000240)={0x40, 0x11, 0x75, "b965325d35e4335958eb7540e19aeb5a3ec938c0254d3473cfe3d6fe9a401e13dafdbdffc6007021f750ddc22d9fb128fe1ba21aabe0ef138a6bc42205bfcd78f781e8688a37ea5de3d7aa949b4c94e059ad427a8932b57edaeb32bb80eed88e66f223ba19b49764b9077ad09b158cb4605b2b7a06"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x400, 0x0, [0xf0f0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6c}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "12dd"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000540)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "8430"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000680)={0x40, 0x1e, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7}}) 3.304964449s ago: executing program 1 (id=12): r0 = userfaultfd(0x80801) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80080, 0x0) getdents64(r2, &(0x7f0000000040)=""/41, 0x29) getdents64(r2, 0xfffffffffffffffe, 0x29) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r3, &(0x7f0000000040)='3', 0x1, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000081", @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000000)=""/35, 0x23) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x20) 2.904499463s ago: executing program 0 (id=13): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x6}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000000d28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c52995560a99956bed40cf5a8c1dfd3db7e2378d5afd35f4c16827f55b3af4d07fce7fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af915600020000000000000000000000000000004900", 0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'team_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x29, 0x3, 0x3}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) r2 = io_uring_setup(0x18dd, &(0x7f0000000080)={0x0, 0x3d07, 0x0, 0x2, 0x354}) syz_io_uring_setup(0x55bc, &(0x7f0000000100)={0x0, 0x856f, 0x200, 0x2, 0x2ee, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000180)) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x2000) close_range(r1, 0xffffffffffffffff, 0x0) 2.657447013s ago: executing program 0 (id=14): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f00000000c0), &(0x7f0000000140)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x7}}, './file1\x00'}) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fremovexattr(r6, &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './file1\x00'}) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000000200)={0x2}) mmap(&(0x7f00009d5000/0x1000)=nil, 0x1000, 0xb635773f06ebbee4, 0x4010, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x73e, &(0x7f0000433000/0x2000)=nil, 0x3) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x324) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="25030f003fff94"], 0xffdd) sendmsg$unix(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="99733a", 0x3}, {&(0x7f0000000140)="ec", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x40843}, 0x48000) quotactl_fd$Q_GETINFO(r9, 0xffffffff80000501, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000040)={0x8c, 0x101, 0x1, 0xffff, 0x0, [0x3, 0x9, 0x5cc, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.656703232s ago: executing program 1 (id=15): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigsuspend(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0xdbb, &(0x7f0000000000)=0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001a80), 0x0, 0x684580) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000eff000/0x4000)=nil, &(0x7f0000ce5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) r3 = eventfd(0xb) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x5c9, r2, &(0x7f0000000380)="a31727813a20b88a11b3dcb0e8960458caf4d83606dcab815d0c2236ef707149bbb444a55ce4e3d1e370340c961ed76c00b5d8b7cda99b7b7b8de7631f645376270cca2b86be5d221b60c0d856070773c27199887b3eec75fa6a70131ce956ba0b47cdd0f4828854b136a07e1e2aa1b46ff0027eec391e420d150dcf45841f1dca457d83125935f0a971b71196d2b937ad0e73c98ea99a6b8cd4e085e55d5945adca341f21abce9aa668d2964c", 0xad, 0x1, 0x0, 0x1, r3}, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x13, r6, 0x3000) lsm_get_self_attr(0x67, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x2, 0xa, 0x2, '\x00', 0x8001}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000440)={0x7, "5284570c183a295cb0b86e4c112f5d145ccfc90d18ae0869b8590d0fee4dbc4ffae254ee5d9c89d43f1f16460fb42a30f94f5ee8508a5e00d8109e361474df19", {0x4, 0x8}}) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0xa0000, 0x0, [0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffc]}) 2.298432751s ago: executing program 0 (id=16): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x300, 0x82, 0x4c, 0xc5, 0x8, 0x1435, 0x918, 0xd3f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x41, 0xf5, 0x6c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003ec0)={0x2020}, 0x2020) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)="96", 0x1}], 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.225009553s ago: executing program 4 (id=17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xde, 0x63, 0x3e, 0x20, 0xc72, 0x13, 0x4419, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x95, 0x0, 0x1, 0xc9, 0x7b, 0xd8, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4000b}, 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="41c2", 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000240)='E?', 0x2}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x246000, 0x0) dup2(r3, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="6a0ac4ff00000000711073000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4010044}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x384, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x354, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x100007, 0x7fff, 0x2, 0x19, 0x13, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "4388a1fb1acc696a061a7a3798c112eb8f78f5f6beab762e913d51600d4250ed3925d3d4739243b8d19c36bae29baf5bcfa1d81cc73f5d2204cead28cdd6272fb839f8ca6a1389088b57590a2a1b3e1bb2ac47a2eef1ac42cef8d4ad169ca6786b449bb71c8311d02a7a714cd688bb2e0d78d8b96f0ecc52acc50281a760a3476c2baa671abf90a715eef4aac65f8c7f099e4dca327fe94ce68efc43a71ee24f829b68a5f5fb7a2e438fdaa7692e98f85c65a01f1acbc145a6b87476e99c1c8c399af19c7d2265a5c6d0ec5c8638f9c4cd2c9a4c811d8d7e647fea7d3d913459352f0da475cb1c4c54fe58fa779d781d6373a2495b8916bc6e4fc2c35c109119"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0xce8, 0x2, 0xc, 0xc, 0xb, 0x4}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x764, 0x401, 0x2, 0x1b, 0x1, 0x13, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7}]}}]}, 0x384}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {0x6}, {0x0, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_POLICE={0x4}]}}]}, 0x34}}, 0x4000) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000000c0)=0x1) r9 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r9, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x6}, {0x0, 0xb8}, {}, @control={0x9, 0x2, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xc}, {}, @addr={0x8, 0x5a}}], 0x38) read$FUSE(r9, &(0x7f0000000880)={0x2020}, 0x2020) listen(r1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r10) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa00fe8000000000000000000000000000bbfe8000000000000000000000000000aafffd4e22000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="64c200009078000000020000"], 0x0) 2.117640974s ago: executing program 1 (id=18): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000098000000060a010400000000000000000100000008000b4000000000700004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c0800024000000000140001800e000100627974656f726465720000000900010073797a30"], 0x10c}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) 2.041318552s ago: executing program 1 (id=19): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000280)={0x1, 0x0, 0x11, 0x14, 0x83, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_ethernet(0x24, &(0x7f0000004300)={@broadcast, @remote, @void, {@llc_tr={0x11, {@llc={0x42, 0x6, "c3", "8219c45ad551e7de9d0503b1eac1fc900dcd4c"}}}}}, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x801, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x90400) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000000)={0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 1.921558083s ago: executing program 1 (id=20): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010003, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket(0x11, 0x800000003, 0x0) msgget$private(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.723588797s ago: executing program 3 (id=21): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r3}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 1.421598738s ago: executing program 3 (id=22): syz_clone(0x100e00, &(0x7f0000000000)="989ade84f3534c0d43eefd01636a2778c396439379a07beca9bfb93d2ea1ed8bd6be5b057cc78a18d8", 0x29, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000240)="4fffa37306eba2e88d003305e00604000088") socket$inet6(0xa, 0x80000, 0x9) syz_usb_connect(0x2, 0xdf, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xd7, 0xe3, 0x6a, 0x20, 0x2040, 0xb130, 0xc835, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x20, 0x1, 0x40, 0x1, [{{0x9, 0x4, 0x70, 0xd, 0x4, 0x65, 0x8a, 0x2e, 0xe6, [], [{{0x9, 0x5, 0x3, 0x8, 0x400, 0x80, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xa}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x7, 0xe, 0x80}}, {{0x9, 0x5, 0xe, 0x2, 0x38, 0x3, 0x80, 0x7f}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x3, 0x0, [@generic={0x25, 0x30, "f340d32dd8ab3048072f28917b297bff73bb24e9697bdd26213e26db22930664afa032"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x44}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x4001}}]}) 974.836423ms ago: executing program 1 (id=23): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0x1) sendmmsg$inet_sctp(r1, &(0x7f0000007cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@sndrcv={0x30, 0x84, 0x1, {0xb6, 0x2, 0xc207, 0xfffffffc, 0xf34c, 0xfffffba1, 0x0, 0x3}}], 0x30}], 0x1, 0x8000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00141a000000c2ecd25f75d8b139ec2e302efaa2ddacc3e938ae1b"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0x4, 0x85, {0x85, 0x8, "388f5022e28b6ec6ae77731ae3ca67d8c6df36d25317df5791eb8960d6c869cca7d7358ed57f5461a9fa515ddeaefe79746cf70c28017d47845467741986e35b707295489e50c564de927c994c1630c6906d241a78df4bc929ba03765aa37f730d93141132f38d52bb99039864f76d5c3957fff9b50f5362d95589662121ded9b87a02"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x15, 0xf4, "cbe14dda0d63b760a106a3fd923852ae28e37903e134cf9c04a329785427b6e097509780eab638ef85f644ce53427b5537e02e4bbeebdbc0b828a744f457d715c4adc2a6280832bba2ae842bca5db3b394e60fd6134b956d4ae01037a9dbc71b5aa44ba5eba78fc1efc1370e53525d913d3fe1335b25c411f6f631b22669e9f458d93f2f2aebfbb111f54366fb316fbb074651e73f282bb7986683d6d2bacc24a326ed8ae2a3c116eee8ca8428d99009bc59425ee9d5361d8215ad78f7647515493285d369e799b82be9ca5ee5701aa0863b89239c7ff44dff536336120a0128a2d0f991d8b3201df26757d40a0f3e286129a108"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000200)={0x20, 0x81, 0x3, "11f73a"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "f6db"}, &(0x7f0000000400)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000000500)={0x20, 0x84, 0x4, "3b9bc238"}, &(0x7f0000000540)={0x20, 0x85, 0x3, 'wC`'}}) 597.688075ms ago: executing program 0 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f99000/0x2000)=nil}) io_uring_setup(0x45, &(0x7f0000000140)={0x0, 0x9b4b, 0x200, 0x1, 0x336}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x1, 0x7]}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 325.596307ms ago: executing program 0 (id=25): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffff7fffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4e23, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffc}, 0x101}}, 0xb8}}, 0x20004800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = dup2(r4, r0) open(&(0x7f0000000140)='./file0\x00', 0x507d01, 0x40) readv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) 281.656862ms ago: executing program 2 (id=26): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x1}}, 0x18) 188.423961ms ago: executing program 2 (id=27): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000580)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a1407509048002060103ec010905170220009100060725018008ff0009058703ff03d101070201090010000000000000072501", @ANYRESHEX=r0, @ANYRESDEC=0x0], &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) 121.069324ms ago: executing program 0 (id=28): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x100}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r2, 0x7ffe, 0x184c, 0x2, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) unshare(0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80002) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x7], [0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x5, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) r10 = socket(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x5, 0x8}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000000) setsockopt$sock_int(r10, 0x1, 0x46, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x41, 0x0, r0, 0x0, &(0x7f0000000500)="43bceb9e64d6598b1d20b8103ccc4c9ba6a6427b7dc63894ed751c759304878e660a371ac2a5c0796c350f014a9e715b86dd4793bd2060d163a204768c5844fd1bd180497194c874415da266c153d45df9d99572135bfeb88088f7e7027cae0924274a255bbab740f834fdb93a49dd2ddd9a204052854e4fcb075f750d3b9547425fb06f30a05cac06472bfa5c02cc2a6884f08004a3097cc4aa405d54846440d16280654d85839b745002d2ab4b5271d783247fa5ce543f26279de348444915108deb9fca6e5e67465bd4d433a184f085f2d75227e147e8d36f3d84d130607c07369c3ec0733c8996a400c7a426", 0xee, 0x100, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 0s ago: executing program 3 (id=29): mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x03\x00\x00\x0083\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x901) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000003000000fd0900008400000091000000", @ANYRES32], 0x48) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) sendfile(r1, r1, &(0x7f0000000000)=0x100, 0x3) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async, rerun: 32) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (rerun: 32) socket$rxrpc(0x21, 0x2, 0xa) (async) syz_usb_connect(0x6, 0x210, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x21, 0xc1, 0xe5, 0x40, 0x67b, 0x2304, 0xb868, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1fe, 0x1, 0xfd, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x76, 0xa2, 0xee, 0x0, [], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x7, 0x6, [@generic={0x98, 0x4, "1b7542ecb0c4dd5d0e57398a46f65daefdb82511bd64035fef1ce340e4c0954be0c08db0780394dc17b73700f3adf61a18a09c9d01a3bf6aab72ce6fbf4a1a6ec8903d3477166ffa8971cfd539c6d0696bf01b6315dc9dc23e7e87b15d538b5fb84f06a232a329e0b542926c1ef5f72b5622cda255f5518b221b0e327fac6530c37f488a42ef8ec7d21ab3ff5794b636314d540d98b8"}, @generic={0xd7, 0x5, "9481ae634795722aab468413e2b5529b0fe52049adedb1abb6c0ac749b385060616bee07fca793a616ae680d52aeffbd3d3f098c908697f8be15648c713cf7177e39f34018126713502da31ae46ed9c39284ccb6fc3c4a6af80cf36b810b00aa00b810e74d60355da74f33ca1f03829a43b67d4615dc2f730e656c82a2e484254481f4456d148eb08c755b76f1e2191a0b795e1b7dbd2708c6c1076667abe43445fc8c62a54230fed1edd4c721767a3c79aec98cd65f560692fb9a29b2683a21c8ecda6bfa44334ee5227d7ecf421a8cbc2e000ef3"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0x3, 0xb, 0x2, [@generic={0x6b, 0xc, "2d29c6d857e44380b508008c0e3139c1881abf96a62c1f8489338a6edf5b49bb59c5399811e57209cf51a6cf89fb9811965bfc9123a59ae59d7fab2d6da46954a43596a0e1b7ac811d711587cbb76cf39f3af7569b7adda33a322e24d8c0ba045264a410e3db0019a4"}]}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 56.123031][ T5819] cgroup: Unknown subsys name 'net' [ 56.261982][ T5819] cgroup: Unknown subsys name 'cpuset' [ 56.270143][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.554157][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.368841][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.369619][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.377421][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.392216][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.402056][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.410323][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.417514][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.426162][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.433598][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.441042][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.441623][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.449466][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.456148][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.462762][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.469684][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.477118][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.483392][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.492168][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.506007][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.519458][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.519531][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.534150][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.546804][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.555092][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.612895][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.624461][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.634491][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.642766][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.659532][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.668508][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.957838][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 62.010561][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 62.078207][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 62.191106][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.198517][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.206362][ T5843] bridge_slave_0: entered allmulticast mode [ 62.213340][ T5843] bridge_slave_0: entered promiscuous mode [ 62.245843][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.256469][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.264201][ T5843] bridge_slave_1: entered allmulticast mode [ 62.271670][ T5843] bridge_slave_1: entered promiscuous mode [ 62.279012][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.286176][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.293506][ T5848] bridge_slave_0: entered allmulticast mode [ 62.300135][ T5848] bridge_slave_0: entered promiscuous mode [ 62.339564][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.346708][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.354493][ T5848] bridge_slave_1: entered allmulticast mode [ 62.361293][ T5848] bridge_slave_1: entered promiscuous mode [ 62.393170][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.400369][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.407519][ T5850] bridge_slave_0: entered allmulticast mode [ 62.414553][ T5850] bridge_slave_0: entered promiscuous mode [ 62.422401][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 62.448225][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.455498][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.462980][ T5850] bridge_slave_1: entered allmulticast mode [ 62.473638][ T5850] bridge_slave_1: entered promiscuous mode [ 62.486838][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.510849][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 62.534280][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.545386][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.605414][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.617890][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.672421][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.700170][ T5843] team0: Port device team_slave_0 added [ 62.737547][ T5843] team0: Port device team_slave_1 added [ 62.760894][ T5848] team0: Port device team_slave_0 added [ 62.766913][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.777835][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.785137][ T5847] bridge_slave_0: entered allmulticast mode [ 62.792683][ T5847] bridge_slave_0: entered promiscuous mode [ 62.801390][ T5850] team0: Port device team_slave_0 added [ 62.807296][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.814578][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.821734][ T5849] bridge_slave_0: entered allmulticast mode [ 62.828205][ T5849] bridge_slave_0: entered promiscuous mode [ 62.843315][ T5848] team0: Port device team_slave_1 added [ 62.859250][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.866372][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.873859][ T5847] bridge_slave_1: entered allmulticast mode [ 62.880891][ T5847] bridge_slave_1: entered promiscuous mode [ 62.889904][ T5850] team0: Port device team_slave_1 added [ 62.895779][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.903003][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.910629][ T5849] bridge_slave_1: entered allmulticast mode [ 62.917150][ T5849] bridge_slave_1: entered promiscuous mode [ 62.932397][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.939564][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.965574][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.978116][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.985309][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.011887][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.079659][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.086626][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.113556][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.126977][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.134580][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.161039][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.174973][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.195977][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.214071][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.223682][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.230851][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.257161][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.279727][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.304223][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.311463][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.337676][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.385105][ T5847] team0: Port device team_slave_0 added [ 63.395414][ T5843] hsr_slave_0: entered promiscuous mode [ 63.402318][ T5843] hsr_slave_1: entered promiscuous mode [ 63.420883][ T5848] hsr_slave_0: entered promiscuous mode [ 63.426873][ T5848] hsr_slave_1: entered promiscuous mode [ 63.433419][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.441291][ T5848] Cannot create hsr debugfs directory [ 63.450256][ T5847] team0: Port device team_slave_1 added [ 63.469142][ T5849] team0: Port device team_slave_0 added [ 63.506404][ T5850] hsr_slave_0: entered promiscuous mode [ 63.512497][ T54] Bluetooth: hci3: command tx timeout [ 63.519179][ T5850] hsr_slave_1: entered promiscuous mode [ 63.525081][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.533612][ T5850] Cannot create hsr debugfs directory [ 63.540682][ T5849] team0: Port device team_slave_1 added [ 63.590609][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.594582][ T5837] Bluetooth: hci0: command tx timeout [ 63.597562][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.603845][ T54] Bluetooth: hci2: command tx timeout [ 63.636647][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.666368][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.673432][ T54] Bluetooth: hci1: command tx timeout [ 63.682341][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.709093][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.724186][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.731468][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.757868][ T54] Bluetooth: hci4: command tx timeout [ 63.757976][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.795788][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.802882][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.830383][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.886086][ T5847] hsr_slave_0: entered promiscuous mode [ 63.892471][ T5847] hsr_slave_1: entered promiscuous mode [ 63.898472][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.906430][ T5847] Cannot create hsr debugfs directory [ 63.942182][ T5849] hsr_slave_0: entered promiscuous mode [ 63.948275][ T5849] hsr_slave_1: entered promiscuous mode [ 63.954765][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.962472][ T5849] Cannot create hsr debugfs directory [ 64.234848][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.260414][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.275550][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.288365][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.311436][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.326261][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.341950][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.361787][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.409048][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.418523][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.428480][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.442333][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.522958][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.568404][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.578240][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.588043][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.597713][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.610600][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.634468][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.642271][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.652248][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.695207][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.734723][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.742046][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.766831][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.774159][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.881597][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.893312][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.940071][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.947725][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.972551][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.979790][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.006752][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.013856][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.032706][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.056204][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.063326][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.077497][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.103538][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.126585][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.142787][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.149938][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.194600][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.211319][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.226142][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.235318][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.242522][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.252895][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.260028][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.306872][ T5848] veth0_vlan: entered promiscuous mode [ 65.324803][ T5848] veth1_vlan: entered promiscuous mode [ 65.335272][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.342380][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.358061][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.380091][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.387196][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.511412][ T5843] veth0_vlan: entered promiscuous mode [ 65.517596][ T5848] veth0_macvtap: entered promiscuous mode [ 65.533240][ T5848] veth1_macvtap: entered promiscuous mode [ 65.553166][ T5843] veth1_vlan: entered promiscuous mode [ 65.566568][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.577458][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.589096][ T54] Bluetooth: hci3: command tx timeout [ 65.614662][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.634848][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.648112][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.659492][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.668205][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.677672][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.686540][ T54] Bluetooth: hci2: command tx timeout [ 65.686631][ T5837] Bluetooth: hci0: command tx timeout [ 65.707068][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.728313][ T5843] veth0_macvtap: entered promiscuous mode [ 65.737797][ T5843] veth1_macvtap: entered promiscuous mode [ 65.749579][ T5837] Bluetooth: hci1: command tx timeout [ 65.786759][ T5849] veth0_vlan: entered promiscuous mode [ 65.808925][ T5850] veth0_vlan: entered promiscuous mode [ 65.820186][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.831797][ T5837] Bluetooth: hci4: command tx timeout [ 65.834121][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.851900][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.864442][ T5849] veth1_vlan: entered promiscuous mode [ 65.877994][ T5850] veth1_vlan: entered promiscuous mode [ 65.891950][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.903114][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.916792][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.938432][ T5847] veth0_vlan: entered promiscuous mode [ 65.954480][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.963462][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.975363][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.984180][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.037379][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.045992][ T5847] veth1_vlan: entered promiscuous mode [ 66.051837][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.093536][ T5849] veth0_macvtap: entered promiscuous mode [ 66.121300][ T5849] veth1_macvtap: entered promiscuous mode [ 66.152167][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.155320][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.170623][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.173409][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.188039][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.200755][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.212435][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.242123][ T5847] veth0_macvtap: entered promiscuous mode [ 66.270245][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.282360][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.292641][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.303407][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.318126][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.328193][ T5850] veth0_macvtap: entered promiscuous mode [ 66.356529][ T5847] veth1_macvtap: entered promiscuous mode [ 66.373684][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.378141][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.382689][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.407771][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.416746][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.445688][ T5850] veth1_macvtap: entered promiscuous mode [ 66.461999][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.519147][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.547120][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.566169][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.576468][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.587632][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.597855][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.610233][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.621250][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.702643][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.706331][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.721976][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.724228][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.739957][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.752597][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.762729][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.773425][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.784090][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.796244][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.805089][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.813954][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.822896][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.859701][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.879318][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.889301][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.900680][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.911328][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.922167][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.932449][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.943000][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.955756][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.963425][ T5886] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.024594][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.036707][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.047865][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.058569][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.070046][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.080781][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.090881][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.101457][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.113405][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.128296][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.141429][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.161257][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.176209][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.193255][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.202054][ T5886] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 67.202098][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.221071][ T5886] usb 4-1: config 0 descriptor?? [ 67.227828][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.237207][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.245720][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 67.293959][ T5898] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1'. [ 67.315469][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.325554][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.416248][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.434258][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.536042][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.552352][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.569879][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.577731][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.655559][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 67.661736][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.676761][ T5837] Bluetooth: hci3: command tx timeout [ 67.686557][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.715403][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 67.741601][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 67.748739][ T5837] Bluetooth: hci0: command tx timeout [ 67.748835][ T54] Bluetooth: hci2: command tx timeout [ 67.780899][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 67.803555][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 67.828993][ T54] Bluetooth: hci1: command tx timeout [ 67.835650][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 67.864342][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 67.886223][ T5886] pwc: recv_control_msg error -32 req 02 val 2100 [ 67.900803][ T5886] pwc: recv_control_msg error -32 req 04 val 1500 [ 67.909008][ T54] Bluetooth: hci4: command tx timeout [ 67.918497][ T5886] pwc: recv_control_msg error -32 req 02 val 2500 [ 67.939062][ T5884] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 67.948158][ T5886] pwc: recv_control_msg error -32 req 02 val 2400 [ 67.956226][ T5886] pwc: recv_control_msg error -32 req 02 val 2600 [ 67.964833][ T5915] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.100640][ T5884] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 68.117197][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.136350][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.147079][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 68.172966][ T5884] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 68.186874][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.202800][ T5884] usb 5-1: config 0 descriptor?? [ 68.372140][ T5886] pwc: recv_control_msg error -32 req 04 val 1100 [ 68.379379][ T5886] pwc: recv_control_msg error -32 req 04 val 1200 [ 68.401394][ T5886] pwc: Registered as video103. [ 68.423028][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 68.539238][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.627111][ T5884] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0935.0001/input/input6 [ 68.678700][ T5881] usb 3-1: device descriptor read/64, error -71 [ 68.801921][ T5884] uclogic 0003:28BD:0935.0001: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.4-1/input0 [ 68.819396][ T5904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.828237][ T5904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.872739][ T5883] usb 5-1: USB disconnect, device number 2 [ 68.919083][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.062283][ T29] audit: type=1326 audit(1739782661.456:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1f8cde9 code=0x7ffc0000 [ 69.080174][ T5942] pim6reg: tun_chr_ioctl cmd 1074025677 [ 69.090102][ T5881] usb 3-1: device descriptor read/64, error -71 [ 69.090630][ T5942] pim6reg: linktype set to 804 [ 69.117095][ T5941] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.122108][ T5942] pim6reg: tun_chr_ioctl cmd 1076925456 [ 69.134722][ T29] audit: type=1326 audit(1739782661.496:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f46f1f8cde9 code=0x7ffc0000 [ 69.182043][ T29] audit: type=1326 audit(1739782661.496:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1f8cde9 code=0x7ffc0000 [ 69.209359][ T5881] usb usb3-port1: attempt power cycle [ 69.221218][ T29] audit: type=1326 audit(1739782661.496:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1f8cde9 code=0x7ffc0000 [ 69.245136][ T29] audit: type=1326 audit(1739782661.496:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46f1f8cde9 code=0x7ffc0000 [ 69.267845][ T29] audit: type=1326 audit(1739782661.496:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1f8cde9 code=0x7ffc0000 [ 69.292846][ T29] audit: type=1326 audit(1739782661.506:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f46f1f8cde9 code=0x7ffc0000 [ 69.325185][ T29] audit: type=1326 audit(1739782661.516:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1f8cde9 code=0x7ffc0000 [ 69.357031][ T29] audit: type=1326 audit(1739782661.516:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46f1f8b750 code=0x7ffc0000 [ 69.387346][ T29] audit: type=1326 audit(1739782661.516:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1f8cde9 code=0x7ffc0000 [ 69.559119][ T5881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.580123][ T5881] usb 3-1: device descriptor read/8, error -71 [ 69.660954][ T5886] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.718812][ T974] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.759634][ T54] Bluetooth: hci3: command tx timeout [ 69.806406][ T977] usb 4-1: USB disconnect, device number 2 [ 69.818665][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 69.829323][ T54] Bluetooth: hci2: command tx timeout [ 69.829498][ T5837] Bluetooth: hci0: command tx timeout [ 69.835301][ T5881] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 69.849322][ T5881] usb 3-1: device descriptor read/8, error -71 [ 69.849431][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 69.909415][ T5837] Bluetooth: hci1: command tx timeout [ 69.915025][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 69.924776][ T974] usb 5-1: config 0 has an invalid interface number: 149 but max is 0 [ 69.935068][ T974] usb 5-1: config 0 has no interface number 0 [ 69.946623][ T974] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 69.956297][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.964818][ T974] usb 5-1: Product: syz [ 69.969281][ T5881] usb usb3-port1: unable to enumerate USB device [ 69.969517][ T974] usb 5-1: Manufacturer: syz [ 69.985792][ T974] usb 5-1: SerialNumber: syz [ 69.991939][ T5837] Bluetooth: hci4: command tx timeout [ 70.013345][ T974] usb 5-1: config 0 descriptor?? [ 70.389703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.408915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 70.515347][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.527013][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 70.536670][ T5886] usb 1-1: can't read configurations, error -71 [ 70.618761][ T5885] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 70.774335][ T5885] usb 4-1: not running at top speed; connect to a high speed hub [ 70.786542][ T5885] usb 4-1: config 32 has an invalid interface number: 112 but max is 0 [ 70.795752][ T5885] usb 4-1: config 32 has no interface number 0 [ 70.806513][ T5885] usb 4-1: config 32 interface 112 altsetting 13 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 70.818327][ T5885] usb 4-1: config 32 interface 112 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 70.831392][ T5885] usb 4-1: config 32 interface 112 altsetting 13 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 70.849896][ T5885] usb 4-1: config 32 interface 112 has no altsetting 0 [ 70.862773][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=b130, bcdDevice=c8.35 [ 70.877735][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.887867][ T5885] usb 4-1: Product: syz [ 70.894761][ T5885] usb 4-1: Manufacturer: syz [ 70.899588][ T5885] usb 4-1: SerialNumber: syz [ 70.907446][ T5966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.018804][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 71.148253][ T5885] usb 4-1: USB disconnect, device number 3 [ 71.191830][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 71.206337][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 71.227759][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 71.245341][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 71.255038][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.278169][ T9] usb 2-1: Product: syz [ 71.282453][ T9] usb 2-1: Manufacturer: syz [ 71.287065][ T9] usb 2-1: SerialNumber: syz [ 71.293743][ T9] usb 2-1: config 0 descriptor?? [ 71.299592][ T5971] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 71.306986][ T5971] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 71.352931][ T9] usb 2-1: ucan: probing device on interface #0 [ 71.399058][ T5976] netlink: 104 bytes leftover after parsing attributes in process `syz.0.25'. [ 71.674782][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.681676][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.747887][ T5991] loop2: detected capacity change from 0 to 217 [ 71.849014][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 71.908140][ T5996] mmap: syz.0.28 (5996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.008659][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 72.016499][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.024394][ T9] ------------[ cut here ]------------ [ 72.030294][ T9] strnlen: detected buffer overflow: 129 byte read of buffer size 128 [ 72.048751][ T5886] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 72.058784][ T9] WARNING: CPU: 0 PID: 9 at lib/string_helpers.c:1033 __fortify_report+0x9d/0xb0 [ 72.067982][ T9] Modules linked in: [ 72.073173][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.14.0-rc3-syzkaller #0 [ 72.082447][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.092767][ T9] Workqueue: usb_hub_wq hub_event [ 72.097827][ T9] RIP: 0010:__fortify_report+0x9d/0xb0 [ 72.103613][ T9] Code: 84 ed 48 8b 33 48 c7 c0 e0 ad 80 8c 48 c7 c1 00 ae 80 8c 48 0f 44 c8 48 c7 c7 60 ab 80 8c 4c 89 fa 4d 89 f0 e8 e4 d9 8b fc 90 <0f> 0b 90 90 5b 41 5e 41 5f 5d c3 cc cc cc cc 0f 1f 40 00 90 90 90 [ 72.123386][ T9] RSP: 0018:ffffc900000e6b50 EFLAGS: 00010246 [ 72.129705][ T9] RAX: 11bda7c32511dc00 RBX: ffffffff8c80aaa8 RCX: 0000000000100000 [ 72.137788][ T9] RDX: ffffc9001932d000 RSI: 000000000002afd9 RDI: 000000000002afda [ 72.145807][ T9] RBP: 0000000000000000 R08: ffffffff81817e32 R09: 1ffff110170c519a [ 72.155191][ T9] R10: dffffc0000000000 R11: ffffed10170c519b R12: dffffc0000000000 [ 72.164392][ T9] R13: 1ffff9200001cd84 R14: 0000000000000080 R15: 0000000000000081 [ 72.172466][ T9] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 72.181720][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.188654][ T9] CR2: 0000400000088030 CR3: 000000001e692000 CR4: 00000000003526f0 [ 72.196642][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.204941][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.213054][ T9] Call Trace: [ 72.216341][ T9] [ 72.219351][ T9] ? __warn+0x165/0x4d0 [ 72.223532][ T9] ? __fortify_report+0x9d/0xb0 [ 72.228413][ T9] ? report_bug+0x2b3/0x500 [ 72.233657][ T9] ? __fortify_report+0x9d/0xb0 [ 72.238648][ T9] ? handle_bug+0x60/0x90 [ 72.243086][ T9] ? exc_invalid_op+0x1a/0x50 [ 72.247783][ T9] ? asm_exc_invalid_op+0x1a/0x20 [ 72.252885][ T9] ? __warn_printk+0x292/0x360 [ 72.257674][ T9] ? __fortify_report+0x9d/0xb0 [ 72.262637][ T9] __fortify_panic+0x9/0x10 [ 72.267171][ T9] ucan_probe+0x195e/0x1980 [ 72.271791][ T9] ? __pfx_ucan_probe+0x10/0x10 [ 72.276688][ T9] ? pm_runtime_enable+0xa7/0x2d0 [ 72.281814][ T9] ? __pm_runtime_set_status+0x6c1/0xa10 [ 72.287492][ T9] usb_probe_interface+0x641/0xbb0 [ 72.292950][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 72.298951][ T9] really_probe+0x2b9/0xad0 [ 72.303548][ T9] __driver_probe_device+0x1a2/0x390 [ 72.310544][ T9] driver_probe_device+0x50/0x430 [ 72.315963][ T9] __device_attach_driver+0x2d6/0x530 [ 72.321459][ T9] bus_for_each_drv+0x24e/0x2e0 [ 72.326341][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 72.332350][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.337769][ T9] __device_attach+0x333/0x520 [ 72.342643][ T9] ? __pfx_lock_release+0x10/0x10 [ 72.347880][ T9] ? __pfx___device_attach+0x10/0x10 [ 72.353296][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 72.358608][ T9] bus_probe_device+0x189/0x260 [ 72.363500][ T9] device_add+0x856/0xbf0 [ 72.367867][ T9] usb_set_configuration+0x1976/0x1fb0 [ 72.373431][ T9] usb_generic_driver_probe+0x88/0x140 [ 72.378975][ T9] usb_probe_device+0x1b8/0x380 [ 72.383854][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 72.389762][ T9] really_probe+0x2b9/0xad0 [ 72.394832][ T9] __driver_probe_device+0x1a2/0x390 [ 72.400493][ T9] driver_probe_device+0x50/0x430 [ 72.405549][ T9] __device_attach_driver+0x2d6/0x530 [ 72.411221][ T9] bus_for_each_drv+0x24e/0x2e0 [ 72.416083][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 72.422090][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.427506][ T9] __device_attach+0x333/0x520 [ 72.432352][ T9] ? __pfx___device_attach+0x10/0x10 [ 72.437688][ T9] bus_probe_device+0x189/0x260 [ 72.442680][ T9] device_add+0x856/0xbf0 [ 72.447051][ T9] usb_new_device+0x104a/0x19a0 [ 72.452058][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 72.457297][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.462606][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 72.467855][ T9] hub_event+0x2d6d/0x5150 [ 72.474570][ T9] ? __pfx_hub_event+0x10/0x10 [ 72.479883][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 72.484964][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.491136][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.497787][ T9] ? process_scheduled_works+0x9c6/0x18e0 [ 72.503898][ T9] process_scheduled_works+0xabe/0x18e0 [ 72.509661][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 72.515683][ T9] ? assign_work+0x364/0x3d0 [ 72.520372][ T9] worker_thread+0x870/0xd30 [ 72.525008][ T9] ? __kthread_parkme+0x169/0x1d0 [ 72.530124][ T9] ? __pfx_worker_thread+0x10/0x10 [ 72.535263][ T9] kthread+0x7a9/0x920 [ 72.539520][ T9] ? __pfx_kthread+0x10/0x10 [ 72.544753][ T9] ? __pfx_worker_thread+0x10/0x10 [ 72.550709][ T9] ? __pfx_kthread+0x10/0x10 [ 72.555337][ T9] ? __pfx_kthread+0x10/0x10 [ 72.560036][ T9] ? __pfx_kthread+0x10/0x10 [ 72.564651][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.569983][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 72.575213][ T9] ? __pfx_kthread+0x10/0x10 [ 72.579910][ T9] ret_from_fork+0x4b/0x80 [ 72.584356][ T9] ? __pfx_kthread+0x10/0x10 [ 72.589005][ T9] ret_from_fork_asm+0x1a/0x30 [ 72.593812][ T9] [ 72.596863][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.604181][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.14.0-rc3-syzkaller #0 [ 72.612941][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.622993][ T9] Workqueue: usb_hub_wq hub_event [ 72.628024][ T9] Call Trace: [ 72.631300][ T9] [ 72.634230][ T9] dump_stack_lvl+0x241/0x360 [ 72.638907][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.644096][ T9] ? __pfx__printk+0x10/0x10 [ 72.648692][ T9] ? vscnprintf+0x5d/0x90 [ 72.653027][ T9] panic+0x349/0x880 [ 72.656929][ T9] ? __warn+0x174/0x4d0 [ 72.661086][ T9] ? __pfx_panic+0x10/0x10 [ 72.665516][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 72.670468][ T9] __warn+0x344/0x4d0 [ 72.674456][ T9] ? __fortify_report+0x9d/0xb0 [ 72.679488][ T9] report_bug+0x2b3/0x500 [ 72.683817][ T9] ? __fortify_report+0x9d/0xb0 [ 72.688674][ T9] handle_bug+0x60/0x90 [ 72.692920][ T9] exc_invalid_op+0x1a/0x50 [ 72.697418][ T9] asm_exc_invalid_op+0x1a/0x20 [ 72.702274][ T9] RIP: 0010:__fortify_report+0x9d/0xb0 [ 72.707730][ T9] Code: 84 ed 48 8b 33 48 c7 c0 e0 ad 80 8c 48 c7 c1 00 ae 80 8c 48 0f 44 c8 48 c7 c7 60 ab 80 8c 4c 89 fa 4d 89 f0 e8 e4 d9 8b fc 90 <0f> 0b 90 90 5b 41 5e 41 5f 5d c3 cc cc cc cc 0f 1f 40 00 90 90 90 [ 72.727422][ T9] RSP: 0018:ffffc900000e6b50 EFLAGS: 00010246 [ 72.733518][ T9] RAX: 11bda7c32511dc00 RBX: ffffffff8c80aaa8 RCX: 0000000000100000 [ 72.741485][ T9] RDX: ffffc9001932d000 RSI: 000000000002afd9 RDI: 000000000002afda [ 72.749461][ T9] RBP: 0000000000000000 R08: ffffffff81817e32 R09: 1ffff110170c519a [ 72.757437][ T9] R10: dffffc0000000000 R11: ffffed10170c519b R12: dffffc0000000000 [ 72.765404][ T9] R13: 1ffff9200001cd84 R14: 0000000000000080 R15: 0000000000000081 [ 72.773378][ T9] ? __warn_printk+0x292/0x360 [ 72.778163][ T9] __fortify_panic+0x9/0x10 [ 72.782668][ T9] ucan_probe+0x195e/0x1980 [ 72.787191][ T9] ? __pfx_ucan_probe+0x10/0x10 [ 72.792044][ T9] ? pm_runtime_enable+0xa7/0x2d0 [ 72.797072][ T9] ? __pm_runtime_set_status+0x6c1/0xa10 [ 72.802716][ T9] usb_probe_interface+0x641/0xbb0 [ 72.807831][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 72.813456][ T9] really_probe+0x2b9/0xad0 [ 72.817964][ T9] __driver_probe_device+0x1a2/0x390 [ 72.823261][ T9] driver_probe_device+0x50/0x430 [ 72.828369][ T9] __device_attach_driver+0x2d6/0x530 [ 72.833735][ T9] bus_for_each_drv+0x24e/0x2e0 [ 72.838584][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 72.844469][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.849838][ T9] __device_attach+0x333/0x520 [ 72.854603][ T9] ? __pfx_lock_release+0x10/0x10 [ 72.859637][ T9] ? __pfx___device_attach+0x10/0x10 [ 72.864919][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 72.870145][ T9] bus_probe_device+0x189/0x260 [ 72.874997][ T9] device_add+0x856/0xbf0 [ 72.879334][ T9] usb_set_configuration+0x1976/0x1fb0 [ 72.884803][ T9] usb_generic_driver_probe+0x88/0x140 [ 72.890259][ T9] usb_probe_device+0x1b8/0x380 [ 72.895106][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 72.900475][ T9] really_probe+0x2b9/0xad0 [ 72.904984][ T9] __driver_probe_device+0x1a2/0x390 [ 72.910281][ T9] driver_probe_device+0x50/0x430 [ 72.915303][ T9] __device_attach_driver+0x2d6/0x530 [ 72.920672][ T9] bus_for_each_drv+0x24e/0x2e0 [ 72.925517][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 72.931399][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.936773][ T9] __device_attach+0x333/0x520 [ 72.941547][ T9] ? __pfx___device_attach+0x10/0x10 [ 72.946831][ T9] bus_probe_device+0x189/0x260 [ 72.951683][ T9] device_add+0x856/0xbf0 [ 72.956014][ T9] usb_new_device+0x104a/0x19a0 [ 72.960877][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 72.966114][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.971306][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 72.976498][ T9] hub_event+0x2d6d/0x5150 [ 72.980952][ T9] ? __pfx_hub_event+0x10/0x10 [ 72.985714][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 72.990733][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.996709][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.003046][ T9] ? process_scheduled_works+0x9c6/0x18e0 [ 73.008766][ T9] process_scheduled_works+0xabe/0x18e0 [ 73.014341][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 73.020417][ T9] ? assign_work+0x364/0x3d0 [ 73.025009][ T9] worker_thread+0x870/0xd30 [ 73.029623][ T9] ? __kthread_parkme+0x169/0x1d0 [ 73.034683][ T9] ? __pfx_worker_thread+0x10/0x10 [ 73.039803][ T9] kthread+0x7a9/0x920 [ 73.043881][ T9] ? __pfx_kthread+0x10/0x10 [ 73.048653][ T9] ? __pfx_worker_thread+0x10/0x10 [ 73.053779][ T9] ? __pfx_kthread+0x10/0x10 [ 73.058388][ T9] ? __pfx_kthread+0x10/0x10 [ 73.063007][ T9] ? __pfx_kthread+0x10/0x10 [ 73.067593][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 73.072789][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 73.078009][ T9] ? __pfx_kthread+0x10/0x10 [ 73.082611][ T9] ret_from_fork+0x4b/0x80 [ 73.087023][ T9] ? __pfx_kthread+0x10/0x10 [ 73.091623][ T9] ret_from_fork_asm+0x1a/0x30 [ 73.096403][ T9] [ 73.099654][ T9] Kernel Offset: disabled [ 73.104063][ T9] Rebooting in 86400 seconds..