last executing test programs: 8m11.218372467s ago: executing program 5 (id=1145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0a090000000000000000000a0000070900020073797a31000000000900010073797a310000000010000380"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 8m10.544891381s ago: executing program 5 (id=1149): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000140)=0x8) 8m10.333856775s ago: executing program 5 (id=1153): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 8m7.263306868s ago: executing program 5 (id=1157): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 8m1.553790271s ago: executing program 5 (id=1174): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xfffffffffffffdf8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) fchdir(r0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r6, &(0x7f0000000040)=""/40, 0x28) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 8m0.425776504s ago: executing program 5 (id=1178): r0 = syz_io_uring_setup(0x1a3, &(0x7f0000000240)={0x0, 0xf3ea, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, 0x0, 0x0) io_uring_enter(r0, 0x47bc, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xffffc000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') syz_open_dev$tty1(0xc, 0x4, 0x3) read$FUSE(r2, &(0x7f0000005200)={0x2020}, 0x2020) 7m59.231954703s ago: executing program 32 (id=1178): r0 = syz_io_uring_setup(0x1a3, &(0x7f0000000240)={0x0, 0xf3ea, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, 0x0, 0x0) io_uring_enter(r0, 0x47bc, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xffffc000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') syz_open_dev$tty1(0xc, 0x4, 0x3) read$FUSE(r2, &(0x7f0000005200)={0x2020}, 0x2020) 7m33.433189278s ago: executing program 2 (id=1233): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x60f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000008780)={0x64, r5, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}}]}, 0x64}}, 0x0) 7m31.908996014s ago: executing program 2 (id=1236): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x9}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0xe0142, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000500)={0x7, "fa02c80a3a1e00000000000000000010000000b600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168"}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) 7m30.346764853s ago: executing program 2 (id=1240): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000002b00), 0x81940, 0x0) getegid() openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) 7m28.78738192s ago: executing program 2 (id=1241): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 7m22.884699783s ago: executing program 2 (id=1251): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) 7m20.641489228s ago: executing program 2 (id=1254): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 7m3.495363832s ago: executing program 33 (id=1254): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 3m13.57742895s ago: executing program 7 (id=1267): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 3m10.140899271s ago: executing program 7 (id=1786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) 3m9.255537514s ago: executing program 7 (id=1791): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0xb0d5, 0x80, 0x80, 0x12}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd_index=0x8, 0x8, 0x0, 0x0, 0x0, 0x1, {0x2}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x7fff}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3m7.41590472s ago: executing program 34 (id=1791): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0xb0d5, 0x80, 0x80, 0x12}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd_index=0x8, 0x8, 0x0, 0x0, 0x0, 0x1, {0x2}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x7fff}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m21.934825223s ago: executing program 6 (id=1892): socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r3, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005f40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) 2m20.918340511s ago: executing program 6 (id=1894): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x70bd2a, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 2m19.018277308s ago: executing program 6 (id=1898): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x155}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) 2m17.496787981s ago: executing program 6 (id=1902): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4, 0x400, @loopback, 0x80}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000004540)=""/4095, 0xfff}], 0x1, 0xa, 0xb) 2m13.004894359s ago: executing program 6 (id=1912): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 2m12.565452438s ago: executing program 6 (id=1914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x8801, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r3, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 1m56.929155367s ago: executing program 35 (id=1914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x8801, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r3, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 42.801763564s ago: executing program 8 (id=2075): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x10, "d74bcebdfc4e5945d901eaca87b556a1"}, &(0x7f0000000100)=0x18) 40.80078231s ago: executing program 4 (id=2080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a000000c16822ac3bada0e3d6083123f93c0900c5677d48002261aaf8"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) 40.47173389s ago: executing program 4 (id=2082): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x3, 0x6572, 0x1ff}) mmap(&(0x7f0000c00000/0x2000)=nil, 0x2000, 0x1, 0x13, 0xffffffffffffffff, 0x100000000) 37.843743829s ago: executing program 8 (id=2087): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 37.828178049s ago: executing program 4 (id=2088): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 35.484756239s ago: executing program 4 (id=2091): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x500, 0x0) ioctl$TUNGETVNETLE(r0, 0x40047452, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xc5, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b23819", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x20a) 35.467118014s ago: executing program 8 (id=2093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a000000c16822ac3bada0e3d6083123f93c0900c5677d48002261aaf8"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) 34.96312149s ago: executing program 8 (id=2095): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xc6, 0x4) sendto$inet(r0, &(0x7f0000000200)='\x00', 0x1, 0x4048015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 34.273173537s ago: executing program 8 (id=2098): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x10, "d74bcebdfc4e5945d901eaca87b556a1"}, &(0x7f0000000100)=0x18) 32.912721532s ago: executing program 8 (id=2101): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20820}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa1000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r4, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[]) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x10, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000003c0)={'pimreg\x00', 0x7}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r3, 0x1, 0x8000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 30.272543644s ago: executing program 4 (id=2104): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 29.865073096s ago: executing program 4 (id=2105): eventfd(0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550a, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19.481084701s ago: executing program 0 (id=2120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x4, 0x4, 0xfffe}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340), 0x20200, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 18.979199002s ago: executing program 3 (id=2122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400400, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) r1 = fsopen(&(0x7f0000000340)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000001100)={'mangle\x00', 0x1000, "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"}, &(0x7f00000000c0)=0x1024) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x9}, @qipcrtr={0x2a, 0x5, 0xfffffffe}, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x6fd, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffff}) 17.383078373s ago: executing program 0 (id=2124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17.301997191s ago: executing program 36 (id=2101): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20820}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa1000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r4, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[]) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x10, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000003c0)={'pimreg\x00', 0x7}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r3, 0x1, 0x8000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 16.338596087s ago: executing program 0 (id=2127): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xfffffffffffffdf8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044044) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) fchdir(r0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r6, &(0x7f0000000040)=""/40, 0x28) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 14.332707966s ago: executing program 0 (id=2128): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r8}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r10, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 14.220587338s ago: executing program 37 (id=2105): eventfd(0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550a, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 11.630749843s ago: executing program 1 (id=2131): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)="b3"}) 11.051164817s ago: executing program 3 (id=2132): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$PPPIOCDISCONN(r5, 0x7439) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb10000000"], 0x0) statx(r5, &(0x7f00000001c0)='./bus\x00', 0x1000, 0x200, &(0x7f0000000400)) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 9.61853877s ago: executing program 3 (id=2133): r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) syz_io_uring_setup(0x1a1d, &(0x7f0000000540)={0x0, 0x755e, 0x13080, 0x3, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000001740)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.597017919s ago: executing program 1 (id=2134): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 9.210836724s ago: executing program 3 (id=2135): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) r8 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) pipe(0x0) mq_getsetattr(r8, 0x0, 0x0) sendmsg$netlink(r7, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f000000fb80)=ANY=[@ANYBLOB="b83f0000380008002bbd7000fddbdf2518001c8014001100fe8000000000000000000000000000bb41012c80040013804d00ae0062786c3ec6f64f3be7941b9855a6e3c46801ab20083cbde91d49951a99cbb02d2097d19cabfe1a37d0458ef324ce6877ce02f6f05f1df3b84456a4ed48504a922182b5dbca45", @ANYRES32=r3, @ANYBLOB, @ANYBLOB="fb00e200c3ca7e34da31174b8a024f845da500dea47f353dbc855f64304613731143f443c0945cd99456773645769b4b1ce33e90c014cdde3f2d36061dc65be3c633a99b59fa8a397bd23bfef6be715fb8946fa343f183773ff796a0db78784149994d5455ddaa1e0d53e0e9712303743ee97a504e367f37c1bb3c585df7f63d173214bbcdddc8b991c468498ba5f17d4dfca9441e55c0eda0e2cb019b", @ANYRES32, @ANYRES32=r6, @ANYBLOB="16bcd7030cfaa4427dd9b9ffbab58b68887afe05cd144cef9db9931dcaa92a9d3470e5ba557005fecdd832917b7050136713d880e3d0274f50b55656a1eeca1fda42c55cdedc86083f", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r2], 0x3fb8}], 0x1, &(0x7f0000005d40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000106000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c00000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x841}, 0x4000050) 7.161713013s ago: executing program 3 (id=2136): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x28, 0x0, &(0x7f0000000180)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000001c0)={{}, 0x7, 0x7, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x18, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read', 0x3d, 0x8}}, {@blksize}], [{@fowner_lt={'fowner<', r9}}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@audit}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, '[\''}}]}}) 7.068084676s ago: executing program 1 (id=2137): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.605580952s ago: executing program 0 (id=2138): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xfffffffffffffdf8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044044) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) fchdir(r0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r6, &(0x7f0000000040)=""/40, 0x28) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 4.537897748s ago: executing program 0 (id=2139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.42620193s ago: executing program 1 (id=2140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a000000c16822ac3bada0e3d6083123f93c0900c5677d48002261aaf8"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) 3.367631541s ago: executing program 1 (id=2141): ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.024307423s ago: executing program 1 (id=2142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2143): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$PPPIOCDISCONN(r5, 0x7439) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb10000000"], 0x0) statx(r5, &(0x7f00000001c0)='./bus\x00', 0x1000, 0x200, &(0x7f0000000400)) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): ntered forwarding state [ 568.722654][T10369] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1260'. [ 571.300949][ T6010] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 571.667406][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 571.915440][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 572.060325][ T6010] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 573.056628][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.065584][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.341321][ T6010] usb 1-1: string descriptor 0 read error: -71 [ 573.364210][ T6010] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 573.429562][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.655478][ T6010] usb 1-1: config 0 descriptor?? [ 573.667931][T10068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.672655][ T6010] usb 1-1: can't set config #0, error -71 [ 573.691269][ T6010] usb 1-1: USB disconnect, device number 31 [ 578.207420][T10419] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 578.223524][T10419] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 578.231693][T10419] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 578.240880][T10419] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 578.248658][T10419] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 579.847248][T10418] chnl_net:caif_netlink_parms(): no params data found [ 579.882831][ T7693] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 580.064567][ T7693] usb 5-1: Using ep0 maxpacket: 32 [ 580.074791][ T6022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.096922][ T7693] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 580.104574][ T6022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.112378][ T7693] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 580.134624][ T7693] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 580.154533][ T7693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 580.185593][ T7693] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 580.205498][ T7693] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 580.241650][ T7693] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 580.261938][ T7693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.298378][ T7693] usb 5-1: config 0 descriptor?? [ 580.362629][T10419] Bluetooth: hci6: command tx timeout [ 580.702116][ T7693] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 580.930001][ T7693] usb 5-1: USB disconnect, device number 18 [ 580.968649][ T7693] usblp0: removed [ 581.237647][ T6022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.251746][ T6022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.282641][T10443] 9p: Bad value for 'rfdno' [ 581.296731][T10068] veth0_vlan: entered promiscuous mode [ 581.322497][ T7693] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 581.502876][ T7693] usb 1-1: Using ep0 maxpacket: 8 [ 581.510320][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 581.519968][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 581.528091][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 581.536196][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 581.537203][ T7693] usb 1-1: config 0 has no interfaces? [ 581.544143][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 581.559383][T10418] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.629143][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.637128][ T7693] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 581.684040][T10418] bridge_slave_0: entered allmulticast mode [ 581.699730][ T7693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.732842][T10418] bridge_slave_0: entered promiscuous mode [ 581.750284][ T7693] usb 1-1: Product: syz [ 581.763548][ T7693] usb 1-1: Manufacturer: syz [ 581.779998][ T7693] usb 1-1: SerialNumber: syz [ 581.809015][ T7693] usb 1-1: config 0 descriptor?? [ 581.820766][ T6022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.861849][ T6022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.083133][ T5840] Bluetooth: hci6: command tx timeout [ 583.123269][ T6065] usb 1-1: USB disconnect, device number 32 [ 583.323007][T10418] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.356577][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.375536][T10418] bridge_slave_1: entered allmulticast mode [ 583.436420][T10418] bridge_slave_1: entered promiscuous mode [ 583.712467][ T5840] Bluetooth: hci3: command tx timeout [ 584.151937][ T6022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.518954][ T6022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.052580][ T6984] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 585.153789][ T5840] Bluetooth: hci6: command tx timeout [ 585.382511][T10484] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 585.842772][ T5840] Bluetooth: hci3: command tx timeout [ 585.894958][ T6984] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 585.912572][ T6984] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.921797][ T6984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.929906][ T6984] usb 4-1: Product: syz [ 585.940230][T10418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.959024][ T6984] usb 4-1: Manufacturer: syz [ 585.985316][ T6984] usb 4-1: SerialNumber: syz [ 586.037289][T10418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.364447][ T6984] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 586.377486][ T6984] cdc_ncm 4-1:1.0: bind() failure [ 586.397085][ T6984] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 586.404120][ T6984] cdc_ncm 4-1:1.1: bind() failure [ 586.423915][ T6984] usb 4-1: USB disconnect, device number 32 [ 587.282560][ T5840] Bluetooth: hci6: command tx timeout [ 587.381691][T10418] team0: Port device team_slave_0 added [ 587.452113][T10418] team0: Port device team_slave_1 added [ 587.872539][ T5840] Bluetooth: hci3: command tx timeout [ 589.130208][T10418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.165926][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.194079][T10418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.223185][T10418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.239206][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.325646][T10418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.383876][ T6065] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 589.592438][ T6065] usb 1-1: Using ep0 maxpacket: 8 [ 589.610805][ T6065] usb 1-1: config 0 has no interfaces? [ 589.635175][ T6065] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 589.668651][ T6065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.709199][ T6065] usb 1-1: Product: syz [ 589.723025][ T6065] usb 1-1: Manufacturer: syz [ 589.727655][ T6065] usb 1-1: SerialNumber: syz [ 589.810598][ T6065] usb 1-1: config 0 descriptor?? [ 590.074092][ T6065] usb 1-1: USB disconnect, device number 33 [ 590.095816][T10458] chnl_net:caif_netlink_parms(): no params data found [ 590.151552][T10418] hsr_slave_0: entered promiscuous mode [ 590.168313][T10418] hsr_slave_1: entered promiscuous mode [ 590.182971][T10418] debugfs: 'hsr0' already exists in 'hsr' [ 590.203780][T10418] Cannot create hsr debugfs directory [ 590.270418][T10535] Invalid source name [ 590.274543][T10535] UBIFS error (pid: 10535): cannot open "./file0", error -22 [ 590.362772][ T5840] Bluetooth: hci3: command tx timeout [ 593.094260][ T6022] bridge_slave_1: left allmulticast mode [ 593.173144][ T6022] bridge_slave_1: left promiscuous mode [ 593.180634][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.393407][ T6022] bridge_slave_0: left allmulticast mode [ 593.399090][ T6022] bridge_slave_0: left promiscuous mode [ 593.423132][T10566] binder: BINDER_SET_CONTEXT_MGR already set [ 593.429429][T10566] binder: 10565:10566 ioctl 4018620d 200000004a80 returned -16 [ 593.452693][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.952038][T10583] tipc: Failed to remove unknown binding: 66,1,1/0:3216337374/3216337376 [ 594.989502][T10583] tipc: Failed to remove unknown binding: 66,1,1/0:3216337374/3216337376 [ 595.019882][T10583] tipc: Failed to remove unknown binding: 66,1,1/0:3216337374/3216337376 [ 595.193219][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 595.811801][T10596] trusted_key: encrypted_key: insufficient parameters specified [ 599.320954][T10619] binder: BINDER_SET_CONTEXT_MGR already set [ 599.338611][T10619] binder: 10618:10619 ioctl 4018620d 200000004a80 returned -16 [ 600.223356][ T6022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.295573][ T6022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.333913][ T6022] bond0 (unregistering): Released all slaves [ 600.379640][ T6022] bond1 (unregistering): Released all slaves [ 602.745864][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.775254][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.833541][T10458] bridge_slave_0: entered allmulticast mode [ 602.852452][T10458] bridge_slave_0: entered promiscuous mode [ 602.954384][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.983599][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.018274][T10458] bridge_slave_1: entered allmulticast mode [ 603.083048][T10458] bridge_slave_1: entered promiscuous mode [ 603.627745][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.344362][T10663] Invalid source name [ 604.348417][T10663] UBIFS error (pid: 10663): cannot open "./file0", error -22 [ 605.569047][ T6022] hsr_slave_0: left promiscuous mode [ 605.785265][ T6022] hsr_slave_1: left promiscuous mode [ 605.825613][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.057163][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.978191][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.012407][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.249191][ T6022] veth1_macvtap: left promiscuous mode [ 607.310193][ T6022] veth0_macvtap: left promiscuous mode [ 607.348006][ T6022] veth1_vlan: left promiscuous mode [ 607.388459][ T6022] veth0_vlan: left promiscuous mode [ 607.592423][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 607.762489][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 607.881589][ T5906] usb 2-1: config 0 has no interfaces? [ 608.042861][ T5906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 608.190719][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.312668][ T5906] usb 2-1: Product: syz [ 608.316892][ T5906] usb 2-1: Manufacturer: syz [ 608.364661][ T5906] usb 2-1: SerialNumber: syz [ 608.424196][ T5906] usb 2-1: config 0 descriptor?? [ 608.695809][ T10] usb 2-1: USB disconnect, device number 27 [ 610.372551][T10707] Invalid source name [ 610.376645][T10707] UBIFS error (pid: 10707): cannot open "./file0", error -22 [ 613.435275][ T6022] team0 (unregistering): Port device team_slave_1 removed [ 613.541643][ T6022] team0 (unregistering): Port device team_slave_0 removed [ 613.932547][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.992642][T10733] tipc: Started in network mode [ 614.003987][T10733] tipc: Node identity 3e4f288bb7cf, cluster identity 4711 [ 614.031531][T10733] tipc: Enabled bearer , priority 0 [ 614.062548][ T6001] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 614.070510][T10724] syzkaller0: entered promiscuous mode [ 614.081447][T10724] syzkaller0: entered allmulticast mode [ 615.305291][ T6001] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.317349][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 615.481952][ T6001] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 615.505688][ T6001] usb 5-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 615.517460][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.530358][ T6001] usb 5-1: config 0 descriptor?? [ 615.783432][ T6001] appledisplay 5-1:0.0: Could not find int-in endpoint [ 615.794935][ T6001] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 615.842806][T10721] tipc: Resetting bearer [ 616.515265][ T9] usb 5-1: USB disconnect, device number 19 [ 616.604203][T10721] tipc: Disabling bearer [ 616.671083][ T5906] tipc: Node number set to 2306877579 [ 616.734719][T10458] team0: Port device team_slave_0 added [ 616.815705][T10458] team0: Port device team_slave_1 added [ 617.479534][T10757] Invalid source name [ 617.483594][T10757] UBIFS error (pid: 10757): cannot open "./file0", error -22 [ 617.824499][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.888119][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.972495][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.002567][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.019719][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.181358][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.238577][T10766] pim6reg: entered allmulticast mode [ 618.353027][T10764] pim6reg: left allmulticast mode [ 618.448045][ T6022] IPVS: stop unused estimator thread 0... [ 618.685689][T10458] hsr_slave_0: entered promiscuous mode [ 618.714722][T10458] hsr_slave_1: entered promiscuous mode [ 618.721139][T10458] debugfs: 'hsr0' already exists in 'hsr' [ 618.848096][T10458] Cannot create hsr debugfs directory [ 619.170677][T10785] loop4: detected capacity change from 0 to 1024 [ 619.255657][T10785] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1356: bad orphan inode 134217728 [ 619.293571][T10785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.388492][T10418] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 619.404890][ T31] audit: type=1800 audit(1766117024.478:28): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1356" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 619.784395][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 620.678066][T10418] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 620.761010][T10792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.846852][T10418] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 620.885046][T10418] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 620.975047][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.846411][ T6022] bridge_slave_1: left allmulticast mode [ 623.865977][ T6022] bridge_slave_1: left promiscuous mode [ 623.893009][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.958463][ T6022] bridge_slave_0: left allmulticast mode [ 623.989088][ T6022] bridge_slave_0: left promiscuous mode [ 624.009050][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.161978][T10843] Invalid source name [ 624.180413][T10843] UBIFS error (pid: 10843): cannot open "./file0", error -22 [ 626.163986][ T6022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.238123][ T6022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.255986][ T6022] bond0 (unregistering): Released all slaves [ 626.572609][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 626.656118][ T6022] hsr_slave_0: left promiscuous mode [ 626.709205][ T6022] hsr_slave_1: left promiscuous mode [ 626.719966][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.727651][ T10] usb 2-1: device descriptor read/64, error -71 [ 626.785547][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.792970][ T6010] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 626.843621][ T7662] IPVS: starting estimator thread 0... [ 626.972435][ T6010] usb 1-1: Using ep0 maxpacket: 8 [ 627.012461][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 627.072086][ T6022] veth0_vlan: left promiscuous mode [ 627.112454][ T6010] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 627.230241][T10866] IPVS: using max 21 ests per chain, 50400 per kthread [ 627.915120][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.938948][ T6010] usb 1-1: Product: syz [ 627.949068][ T6010] usb 1-1: Manufacturer: syz [ 627.954090][ T10] usb 2-1: device descriptor read/64, error -71 [ 627.969326][ T6010] usb 1-1: SerialNumber: syz [ 628.166691][ T10] usb usb2-port1: attempt power cycle [ 628.210958][ T6010] usb 1-1: config 0 descriptor?? [ 628.787327][ T6010] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 628.812448][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 629.040618][ T6010] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 630.696210][ T10] usb 2-1: device descriptor read/8, error -71 [ 631.008811][ T5929] usb 1-1: USB disconnect, device number 34 [ 631.852495][ T5929] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 632.037124][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 632.065428][ T5929] usb 5-1: unable to get BOS descriptor or descriptor too short [ 632.097659][ T5929] usb 5-1: config 0 has an invalid interface number: 238 but max is 0 [ 632.135313][ T5929] usb 5-1: config 0 has no interface number 0 [ 632.148879][ T5929] usb 5-1: config 0 interface 238 has no altsetting 0 [ 632.178236][ T5929] usb 5-1: New USB device found, idVendor=06e0, idProduct=f108, bcdDevice=9e.70 [ 632.191929][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.200845][ T5929] usb 5-1: Product: syz [ 632.209269][ T5929] usb 5-1: Manufacturer: syz [ 632.215072][ T5929] usb 5-1: SerialNumber: syz [ 632.222277][ T6022] team0 (unregistering): Port device team_slave_1 removed [ 632.230764][ T5929] usb 5-1: config 0 descriptor?? [ 632.521183][ T5929] ti_usb_3410_5052 5-1:0.238: required endpoints missing [ 632.558486][ T6022] team0 (unregistering): Port device team_slave_0 removed [ 632.574316][ T5929] usb 5-1: USB disconnect, device number 20 [ 633.967339][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.973947][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.232926][ T6072] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 635.402656][ T6072] usb 5-1: device descriptor read/64, error -71 [ 635.662994][ T6072] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 635.679121][T10418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.809224][T10418] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.822541][ T6072] usb 5-1: device descriptor read/64, error -71 [ 635.840193][ T6010] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 635.943647][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.950823][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.958817][ T6072] usb usb5-port1: attempt power cycle [ 636.052434][ T6010] usb 4-1: Using ep0 maxpacket: 8 [ 636.237500][ T6010] usb 4-1: config 0 has no interfaces? [ 636.240374][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.250242][ T7376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.363386][T10458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 636.405823][ T6010] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 636.414776][T10458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 636.442397][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.450429][ T6010] usb 4-1: Product: syz [ 636.470932][ T6010] usb 4-1: Manufacturer: syz [ 636.481271][ T6010] usb 4-1: SerialNumber: syz [ 636.492441][ T6072] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 636.523142][ T6010] usb 4-1: config 0 descriptor?? [ 636.564400][ T6072] usb 5-1: device descriptor read/8, error -71 [ 636.589833][T10458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 636.648146][T10458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 636.732941][ T6251] usb 4-1: USB disconnect, device number 33 [ 636.822603][ T6072] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 636.884609][ T6072] usb 5-1: device descriptor read/8, error -71 [ 637.008916][ T6072] usb usb5-port1: unable to enumerate USB device [ 637.228322][T10458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.336415][T10458] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.389620][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.396803][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.491685][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.498910][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.903184][T10419] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.916572][T10419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 641.002995][T10419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 641.011312][T10419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 641.019087][T10419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.130230][T10419] Bluetooth: hci4: command tx timeout [ 644.209434][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 644.219864][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 644.229210][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 644.237818][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 644.246638][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 645.156863][T10419] Bluetooth: hci4: command tx timeout [ 647.879450][ T6065] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 648.019312][T10419] Bluetooth: hci6: command tx timeout [ 648.019785][ T5840] Bluetooth: hci4: command tx timeout [ 648.042886][ T6065] usb 2-1: device descriptor read/64, error -71 [ 649.039514][T11023] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1404'. [ 649.354500][ T6065] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 650.105796][ T5845] Bluetooth: hci4: command tx timeout [ 650.112498][ T5845] Bluetooth: hci6: command tx timeout [ 652.258662][ T5845] Bluetooth: hci6: command tx timeout [ 652.413396][T10969] chnl_net:caif_netlink_parms(): no params data found [ 654.071422][T10969] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.102762][T10969] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.110051][T10969] bridge_slave_0: entered allmulticast mode [ 654.154595][T10969] bridge_slave_0: entered promiscuous mode [ 654.213576][T10969] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.232587][T10969] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.239856][T10969] bridge_slave_1: entered allmulticast mode [ 654.306297][T10969] bridge_slave_1: entered promiscuous mode [ 654.344651][ T5845] Bluetooth: hci6: command tx timeout [ 654.895960][T10969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.776163][T10969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.840050][T10991] chnl_net:caif_netlink_parms(): no params data found [ 655.882222][ T8513] bridge_slave_1: left allmulticast mode [ 655.892496][ T8513] bridge_slave_1: left promiscuous mode [ 655.922707][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.037154][ T8513] bridge_slave_0: left allmulticast mode [ 656.058408][ T8513] bridge_slave_0: left promiscuous mode [ 656.083547][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.090593][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.108642][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.158459][ T8513] bond0 (unregistering): Released all slaves [ 659.488148][T10969] team0: Port device team_slave_0 added [ 659.553044][T10969] team0: Port device team_slave_1 added [ 659.637837][ T8513] hsr_slave_0: left promiscuous mode [ 659.742748][ T8513] hsr_slave_1: left promiscuous mode [ 659.813073][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.966110][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.289790][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 662.686725][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 662.954029][ T6010] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 663.132729][ T6010] usb 2-1: Using ep0 maxpacket: 8 [ 663.149744][ T6010] usb 2-1: config 0 has no interfaces? [ 663.161246][ T6010] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 663.215429][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.282919][ T6010] usb 2-1: Product: syz [ 663.553044][ T6010] usb 2-1: Manufacturer: syz [ 663.557686][ T6010] usb 2-1: SerialNumber: syz [ 663.574832][ T6010] usb 2-1: config 0 descriptor?? [ 663.789538][ T6010] usb 2-1: USB disconnect, device number 34 [ 664.596629][T10969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.606293][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.632709][T10969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.697089][T10969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.726658][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.817052][T10969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.382554][T10991] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.492082][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.725348][T10991] bridge_slave_0: entered allmulticast mode [ 665.890162][T10991] bridge_slave_0: entered promiscuous mode [ 665.996297][T10991] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.021366][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.104735][T10991] bridge_slave_1: entered allmulticast mode [ 666.296919][T10991] bridge_slave_1: entered promiscuous mode [ 666.792253][T10969] hsr_slave_0: entered promiscuous mode [ 666.801754][T10969] hsr_slave_1: entered promiscuous mode [ 666.808570][T10969] debugfs: 'hsr0' already exists in 'hsr' [ 666.814446][T10969] Cannot create hsr debugfs directory [ 667.725190][T11181] binder: 11180:11181 ioctl 4018620d 0 returned -22 [ 669.105612][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.163686][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.462571][ T6251] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 669.632670][ T6251] usb 5-1: Using ep0 maxpacket: 8 [ 669.650766][ T6251] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 669.669668][ T6251] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 669.689892][ T6251] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 669.710108][ T6251] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 669.730577][ T6251] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 669.801501][ T6251] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 669.898988][ T6251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.360724][ T6251] usb 5-1: usb_control_msg returned -32 [ 670.392643][ T6251] usbtmc 5-1:16.0: can't read capabilities [ 670.402975][T10991] team0: Port device team_slave_0 added [ 670.507207][T10991] team0: Port device team_slave_1 added [ 671.741601][T11212] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 671.844427][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.890129][ T7662] usb 5-1: USB disconnect, device number 25 [ 671.897516][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.979126][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.993858][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.001616][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.087541][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.921356][T11235] binder: 11234:11235 ioctl 4018620d 0 returned -22 [ 674.122626][ T7662] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 675.665731][ T7662] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.692459][ T7662] usb 4-1: config 0 has no interfaces? [ 675.713436][ T6251] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 675.726574][ T7662] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.754590][ T7662] usb 4-1: config 0 has no interfaces? [ 675.773448][ T7662] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.792388][ T7662] usb 4-1: config 0 has no interfaces? [ 675.796863][T10991] hsr_slave_0: entered promiscuous mode [ 675.815977][ T7662] usb 4-1: string descriptor 0 read error: -22 [ 675.826806][ T7662] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 675.827931][T10991] hsr_slave_1: entered promiscuous mode [ 675.836617][ T7662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.857181][ T7662] usb 4-1: config 0 descriptor?? [ 675.873713][T10991] debugfs: 'hsr0' already exists in 'hsr' [ 675.879567][T10991] Cannot create hsr debugfs directory [ 675.894715][ T6251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 675.928356][ T6251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 675.952450][ T6251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 675.974830][ T6251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 675.988723][ T6251] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 676.025437][ T6251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.042579][ T6251] usb 5-1: Product: syz [ 676.052730][ T6251] usb 5-1: Manufacturer: syz [ 676.057346][ T6251] usb 5-1: SerialNumber: syz [ 676.089166][ T6251] usb 5-1: config 0 descriptor?? [ 676.107835][ T7662] usb 4-1: USB disconnect, device number 34 [ 677.340650][ T6251] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 677.403119][ T6251] usb 5-1: USB disconnect, device number 26 [ 677.495642][ T8513] bridge_slave_1: left allmulticast mode [ 677.501332][ T8513] bridge_slave_1: left promiscuous mode [ 677.581412][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.855293][ T8513] bridge_slave_0: left allmulticast mode [ 677.861008][ T8513] bridge_slave_0: left promiscuous mode [ 678.100860][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.739171][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.769030][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.791822][ T8513] bond0 (unregistering): Released all slaves [ 682.102594][ T8513] hsr_slave_0: left promiscuous mode [ 682.134372][ T8513] hsr_slave_1: left promiscuous mode [ 682.156323][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.179587][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.063385][ T6010] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 684.258362][ T6010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 684.325185][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 684.361207][ T6010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 684.462830][ T6010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 684.573272][ T6010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 684.678958][ T6010] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 684.709227][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.739169][ T6010] usb 4-1: Product: syz [ 684.749431][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 684.760343][ T6010] usb 4-1: Manufacturer: syz [ 684.787240][ T6010] usb 4-1: SerialNumber: syz [ 684.834440][T11321] binder: 11320:11321 ioctl 4018620d 0 returned -22 [ 684.844119][ T6010] usb 4-1: config 0 descriptor?? [ 685.875435][ T6010] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 687.953310][ T6010] usb 4-1: USB disconnect, device number 35 [ 688.064492][T11297] udevd[11297]: setting owner of /dev/bus/usb/004/035 to uid=0, gid=0 failed: No such file or directory [ 691.107211][T10969] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 691.322730][T10969] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 691.452438][T10969] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 691.494180][T10969] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 693.844561][T11392] binder: BINDER_SET_CONTEXT_MGR already set [ 693.850582][T11392] binder: 11391:11392 ioctl 4018620d 200000004a80 returned -16 [ 694.227461][T10969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.235186][ T6251] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 694.261339][T10991] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 694.305267][T10991] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 694.327691][T10991] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 694.359145][T10991] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 694.407321][ T6251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 694.416152][T10969] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.438800][ T6251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 694.465745][ T6251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 694.486684][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.493857][ T8513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.514852][ T6251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 694.537883][ T6251] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 694.562521][ T6251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.570554][ T6251] usb 1-1: Product: syz [ 694.579522][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.582391][ T6251] usb 1-1: Manufacturer: syz [ 694.586724][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.591145][ T6251] usb 1-1: SerialNumber: syz [ 694.616371][ T6251] usb 1-1: config 0 descriptor?? [ 694.846234][ T6251] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 695.067580][ T10] usb 1-1: USB disconnect, device number 35 [ 695.295771][T10991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.365490][T10991] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.392655][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.399013][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.432132][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.439335][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.510620][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.517824][ T7527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.512097][T11433] capability: warning: `syz.4.1500' uses deprecated v2 capabilities in a way that may be insecure [ 697.512773][T11434] loop1: detected capacity change from 0 to 512 [ 697.590123][T10969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.646480][T11434] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz.1.1501: bg 0: block 5: invalid block bitmap [ 697.710373][T11434] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 697.737246][T11434] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.1501: invalid indirect mapped block 3 (level 2) [ 697.764461][T11434] EXT4-fs (loop1): 2 truncates cleaned up [ 697.784076][T11434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.977286][T11436] kthread_run failed with err -4 [ 699.192757][T11021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 699.203001][T11021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 699.210728][T11021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 699.219874][T11021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 699.229391][T11021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 700.784509][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.231339][T11472] binder: BINDER_SET_CONTEXT_MGR already set [ 701.259698][T11472] binder: 11469:11472 ioctl 4018620d 200000004a80 returned -16 [ 701.303381][ T5845] Bluetooth: hci3: command tx timeout [ 701.827188][T11481] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 703.382766][ T5845] Bluetooth: hci3: command tx timeout [ 705.462472][ T5845] Bluetooth: hci3: command tx timeout [ 705.519875][T11021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 705.535025][T11021] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 705.543382][T11021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 705.557025][T11021] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 705.564774][T11021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 707.608246][T11021] Bluetooth: hci3: command tx timeout [ 707.622847][T11021] Bluetooth: hci4: command tx timeout [ 707.764238][T11518] hpfs: hpfs_map_sector(): read error [ 708.384741][T11461] chnl_net:caif_netlink_parms(): no params data found [ 708.581499][T11534] binder: BINDER_SET_CONTEXT_MGR already set [ 708.602777][T11534] binder: 11533:11534 ioctl 4018620d 200000004a80 returned -16 [ 709.702441][T11021] Bluetooth: hci4: command tx timeout [ 712.532402][T11021] Bluetooth: hci4: command tx timeout [ 712.785189][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.822597][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.829911][T11461] bridge_slave_0: entered allmulticast mode [ 712.875949][T11461] bridge_slave_0: entered promiscuous mode [ 712.945007][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.952655][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.960183][T11461] bridge_slave_1: entered allmulticast mode [ 712.995122][T11461] bridge_slave_1: entered promiscuous mode [ 716.354329][T11021] Bluetooth: hci4: command tx timeout [ 717.445309][T11461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.626446][T11461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.775081][T11596] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1538'. [ 718.850011][T11461] team0: Port device team_slave_0 added [ 718.945976][T11461] team0: Port device team_slave_1 added [ 720.883168][T11606] loop3: detected capacity change from 0 to 1024 [ 720.962022][T11502] chnl_net:caif_netlink_parms(): no params data found [ 720.993745][T11606] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1541: bad orphan inode 134217728 [ 721.039797][T11606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.136026][T11461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.159647][ T31] audit: type=1800 audit(1766117126.228:29): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1541" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 721.192627][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.251303][ T31] audit: type=1804 audit(1766117126.228:30): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1541" name="/newroot/284/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 721.281645][T11461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.400965][T11461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.432832][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.502428][T11461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.615004][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 721.668980][T11610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 721.769319][ T2986] bridge_slave_1: left allmulticast mode [ 721.797034][ T2986] bridge_slave_1: left promiscuous mode [ 721.834913][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.870816][ T2986] bridge_slave_0: left allmulticast mode [ 721.913152][ T2986] bridge_slave_0: left promiscuous mode [ 721.922942][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.146780][T11620] binder: 11619:11620 ioctl c0306201 0 returned -14 [ 725.303658][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.328139][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.382604][ T2986] bond0 (unregistering): Released all slaves [ 725.546155][T11461] hsr_slave_0: entered promiscuous mode [ 725.585983][T11461] hsr_slave_1: entered promiscuous mode [ 725.592248][T11461] debugfs: 'hsr0' already exists in 'hsr' [ 725.653518][T11461] Cannot create hsr debugfs directory [ 725.765970][T11502] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.813238][T11502] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.863416][T11502] bridge_slave_0: entered allmulticast mode [ 725.903899][T11502] bridge_slave_0: entered promiscuous mode [ 725.983289][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.272573][ T2986] hsr_slave_0: left promiscuous mode [ 726.323205][ T2986] hsr_slave_1: left promiscuous mode [ 727.832699][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.903922][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.134766][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 730.255996][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 732.558955][T11502] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.768852][T11502] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.784603][T11502] bridge_slave_1: entered allmulticast mode [ 732.806787][T11502] bridge_slave_1: entered promiscuous mode [ 732.977409][T11688] tipc: Enabled bearer , priority 16 [ 733.284201][T11502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.478320][T11502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.958638][T11723] loop5: detected capacity change from 0 to 7 [ 734.008577][T11723] Dev loop5: unable to read RDB block 7 [ 734.020038][T11723] loop5: unable to read partition table [ 734.039588][T11723] loop5: partition table beyond EOD, truncated [ 734.059723][T11723] loop_reread_partitions: partition scan of loop5 (gCj̖P@) failed (rc=-5) [ 734.134452][T11502] team0: Port device team_slave_0 added [ 734.266789][T11502] team0: Port device team_slave_1 added [ 736.032629][ T6072] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 736.040156][T11502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.076435][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.141924][T11502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.232571][ T6072] usb 1-1: Using ep0 maxpacket: 32 [ 736.264434][T11502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.281177][ T6072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.307540][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.340570][ T6072] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 736.383030][ T6072] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 736.399688][T11502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.412392][ T6072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.438612][ T6072] usb 1-1: Product: syz [ 736.456550][ T6072] usb 1-1: Manufacturer: syz [ 736.622451][ T6072] usb 1-1: SerialNumber: syz [ 736.643584][ T6072] usb 1-1: config 0 descriptor?? [ 737.015357][ T5929] usb 1-1: USB disconnect, device number 36 [ 738.303659][ T5929] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 738.480867][ T5929] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 738.493978][ T5929] usb 5-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 738.505532][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.516725][ T5929] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 738.531997][ T5929] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 738.580429][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.648577][ T5929] usb 5-1: config 0 descriptor?? [ 739.732769][T11502] hsr_slave_0: entered promiscuous mode [ 739.757130][T11502] hsr_slave_1: entered promiscuous mode [ 739.781416][T11502] debugfs: 'hsr0' already exists in 'hsr' [ 739.799313][T11502] Cannot create hsr debugfs directory [ 740.189896][T11780] loop6: detected capacity change from 0 to 7 [ 740.219982][T11780] loop6: [ 740.230025][T11780] loop6: partition table partially beyond EOD, truncated [ 740.396015][T11774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 740.526587][T11775] bond_slave_0: entered promiscuous mode [ 740.532629][T11775] bond_slave_1: entered promiscuous mode [ 740.583595][T11775] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 740.644707][T11775] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 741.026490][T11793] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 742.277843][ T6072] usb 5-1: USB disconnect, device number 27 [ 743.581093][T11461] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 743.884308][T11461] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 743.981214][T11461] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 744.069767][ T2986] bridge_slave_1: left allmulticast mode [ 744.323832][ T2986] bridge_slave_1: left promiscuous mode [ 744.330071][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.227226][ T2986] bridge_slave_0: left allmulticast mode [ 745.243944][ T2986] bridge_slave_0: left promiscuous mode [ 745.251055][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.795753][T11831] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 749.893240][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.910838][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.925588][ T2986] bond0 (unregistering): Released all slaves [ 750.171993][ T2986] hsr_slave_0: left promiscuous mode [ 750.212280][ T2986] hsr_slave_1: left promiscuous mode [ 750.233868][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.294908][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.051226][T11875] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 752.559481][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 752.661591][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 753.579940][T11461] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 756.695946][T11900] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1623'. [ 756.830525][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.838051][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.465452][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.506816][T11918] loop1: detected capacity change from 0 to 1024 [ 757.584359][T11918] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1628: bad orphan inode 134217728 [ 757.638168][T11918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.699848][T11461] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.935017][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.942591][ T9036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.950485][ T31] audit: type=1804 audit(1766117162.998:31): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1628" name="/newroot/276/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 758.071477][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.078682][ T9036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.205130][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 758.394569][T11929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.534930][T11502] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 758.884213][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.953287][T11502] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 759.131290][T11502] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 759.317429][T11502] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 759.433340][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 759.449781][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 759.463526][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 759.475029][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 759.488697][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 759.564982][ T5929] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 760.724462][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 760.801276][T11974] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1637'. [ 760.904113][ T5929] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 760.955752][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.997344][ T5929] usb 4-1: Product: syz [ 761.001544][ T5929] usb 4-1: Manufacturer: syz [ 761.052561][ T5929] usb 4-1: SerialNumber: syz [ 761.095669][ T5929] usb 4-1: config 0 descriptor?? [ 761.160622][ T5929] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 761.340926][ T5929] gspca_sn9c2028: read1 error -71 [ 761.392753][ T5929] gspca_sn9c2028: read1 error -71 [ 761.443744][ T5929] gspca_sn9c2028: read1 error -71 [ 761.448891][ T5929] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 761.537594][ T5929] usb 4-1: USB disconnect, device number 36 [ 761.544189][ T5845] Bluetooth: hci6: command tx timeout [ 762.240189][T11958] chnl_net:caif_netlink_parms(): no params data found [ 762.360328][T11502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.622779][ T5845] Bluetooth: hci6: command tx timeout [ 763.914765][T12017] overlayfs: overlapping lowerdir path [ 763.933485][ T6984] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 764.372512][ T6984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 764.456369][ T6984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 764.541102][ T6984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 764.572511][ T6984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 764.627514][ T6984] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 764.652618][ T6984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.660784][ T6984] usb 2-1: Product: syz [ 764.666670][ T6984] usb 2-1: Manufacturer: syz [ 764.671368][ T6984] usb 2-1: SerialNumber: syz [ 764.703650][ T6984] usb 2-1: config 0 descriptor?? [ 764.786615][T11021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 764.799586][T11021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 764.810144][T11021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 764.818593][T11021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 764.826667][T11021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 765.166996][T11958] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.227983][ T6984] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 765.259313][T11958] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.702898][T11021] Bluetooth: hci6: command tx timeout [ 765.947273][ T6984] usb 2-1: USB disconnect, device number 35 [ 765.953524][T11958] bridge_slave_0: entered allmulticast mode [ 765.961863][T11958] bridge_slave_0: entered promiscuous mode [ 765.997946][T11958] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.011440][T11958] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.256335][T11958] bridge_slave_1: entered allmulticast mode [ 766.264945][T11958] bridge_slave_1: entered promiscuous mode [ 766.691134][T11958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.734414][T11958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.911613][T11021] Bluetooth: hci3: command tx timeout [ 766.974295][ T6072] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 767.000329][ T13] bridge_slave_1: left allmulticast mode [ 767.030317][ T13] bridge_slave_1: left promiscuous mode [ 767.036387][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.162547][ T6072] usb 5-1: Using ep0 maxpacket: 32 [ 767.187957][ T6072] usb 5-1: config 0 interface 0 has no altsetting 0 [ 767.206727][ T6072] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 767.226707][ T6072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.246665][ T6072] usb 5-1: Product: syz [ 767.265242][ T6072] usb 5-1: Manufacturer: syz [ 767.307709][ T13] bridge_slave_0: left allmulticast mode [ 767.318912][ T6072] usb 5-1: SerialNumber: syz [ 767.335204][ T13] bridge_slave_0: left promiscuous mode [ 767.341008][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.354981][ T6072] usb 5-1: config 0 descriptor?? [ 767.944500][ T5845] Bluetooth: hci6: command tx timeout [ 768.041843][ T6072] gs_usb 5-1:0.0: Required endpoints not found [ 768.992692][T11021] Bluetooth: hci3: command tx timeout [ 769.485000][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.499199][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.537498][ T13] bond0 (unregistering): Released all slaves [ 769.562895][ T5929] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 769.644706][T11958] team0: Port device team_slave_0 added [ 769.656048][T11958] team0: Port device team_slave_1 added [ 769.714710][T11958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.721767][T11958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.751727][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 769.763140][T11958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.776507][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 769.794771][T11958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.814971][T11958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.823542][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 769.841260][T11958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.853266][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 769.880487][ T5929] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 769.892741][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.902321][ T5929] usb 1-1: Product: syz [ 769.922593][ T5929] usb 1-1: Manufacturer: syz [ 769.933479][ T5929] usb 1-1: SerialNumber: syz [ 769.951157][ T5929] usb 1-1: config 0 descriptor?? [ 769.979828][ T13] hsr_slave_0: left promiscuous mode [ 769.998435][ T13] hsr_slave_1: left promiscuous mode [ 770.008913][ T788] usb 5-1: USB disconnect, device number 28 [ 770.023599][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.093208][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.880251][ T5929] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 770.945991][ T5929] usb 1-1: USB disconnect, device number 37 [ 771.062787][T11021] Bluetooth: hci3: command tx timeout [ 771.478775][ T13] team0 (unregistering): Port device team_slave_1 removed [ 771.636485][ T13] team0 (unregistering): Port device team_slave_0 removed [ 771.839679][T12114] loop1: detected capacity change from 0 to 1024 [ 771.974911][T12114] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1683: bad orphan inode 134217728 [ 772.006321][T12114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.092558][ T31] audit: type=1800 audit(1766117177.118:32): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1683" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 772.298702][ T31] audit: type=1804 audit(1766117177.118:33): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1683" name="/newroot/288/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 772.759177][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 773.424878][T11021] Bluetooth: hci3: command tx timeout [ 773.967728][T12139] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 774.678017][T12128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.922740][ T6251] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 775.076017][T11958] hsr_slave_0: entered promiscuous mode [ 775.143054][T11958] hsr_slave_1: entered promiscuous mode [ 775.174871][T11958] debugfs: 'hsr0' already exists in 'hsr' [ 775.206702][T11958] Cannot create hsr debugfs directory [ 775.253019][ T6251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 775.415380][ T6251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 775.429655][ T6251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 775.436624][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.442772][ T6251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 775.548860][ T6251] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 775.582719][ T6251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.590949][ T6251] usb 1-1: Product: syz [ 775.641367][ T6251] usb 1-1: Manufacturer: syz [ 775.662443][ T6251] usb 1-1: SerialNumber: syz [ 775.689774][ T6251] usb 1-1: config 0 descriptor?? [ 776.007172][ T6251] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 777.213197][ T6251] usb 1-1: USB disconnect, device number 38 [ 777.818350][T12029] chnl_net:caif_netlink_parms(): no params data found [ 781.052698][ T5929] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 781.538251][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 781.613265][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 781.675307][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 781.728052][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 782.239954][ T5929] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 782.257144][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.265659][ T5929] usb 1-1: Product: syz [ 782.269970][ T5929] usb 1-1: Manufacturer: syz [ 782.286502][ T5929] usb 1-1: SerialNumber: syz [ 782.312154][ T5929] usb 1-1: config 0 descriptor?? [ 782.561778][ T5929] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 782.679915][T12029] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.732591][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.758917][T12029] bridge_slave_0: entered allmulticast mode [ 782.773937][ T5929] usb 1-1: USB disconnect, device number 39 [ 782.823135][T12029] bridge_slave_0: entered promiscuous mode [ 783.017174][T12029] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.042109][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.074779][T12029] bridge_slave_1: entered allmulticast mode [ 783.132536][T12029] bridge_slave_1: entered promiscuous mode [ 785.287131][T12029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.338109][T12029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.635414][T12029] team0: Port device team_slave_0 added [ 786.879705][ T13] bridge_slave_1: left allmulticast mode [ 786.908454][ T13] bridge_slave_1: left promiscuous mode [ 786.927340][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.954972][ T13] bridge_slave_0: left allmulticast mode [ 786.977709][ T13] bridge_slave_0: left promiscuous mode [ 787.010803][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.644821][ T6072] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 787.862385][ T6072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 787.888113][ T6072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 787.957298][ T6072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 788.012132][ T6072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 788.118029][ T6072] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 788.156166][ T6072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.217631][ T6072] usb 4-1: Product: syz [ 788.238305][ T6072] usb 4-1: Manufacturer: syz [ 788.270298][ T6072] usb 4-1: SerialNumber: syz [ 788.459983][ T6072] usb 4-1: config 0 descriptor?? [ 788.781520][ T6072] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 789.173689][ T5906] usb 4-1: USB disconnect, device number 37 [ 789.986235][ T788] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 790.009584][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.028707][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.040370][ T13] bond0 (unregistering): Released all slaves [ 790.093809][T12029] team0: Port device team_slave_1 added [ 790.164746][ T788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.191668][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 790.203359][ T788] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 790.238491][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 790.246834][ T788] usb 1-1: SerialNumber: syz [ 790.279154][ T13] hsr_slave_0: left promiscuous mode [ 790.290828][ T13] hsr_slave_1: left promiscuous mode [ 790.298620][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.318600][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.507438][ T788] usb 1-1: 0:2 : does not exist [ 790.583756][ T788] usb 1-1: USB disconnect, device number 40 [ 790.788450][T11297] udevd[11297]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.853435][ T13] team0 (unregistering): Port device team_slave_1 removed [ 792.110159][ T13] team0 (unregistering): Port device team_slave_0 removed [ 792.136324][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 792.963067][ T5929] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 793.003540][T12029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.020773][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.082383][T12029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.115904][T12029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.135033][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.144457][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 793.212406][T12029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.223301][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 793.223351][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 793.223398][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 793.227033][ T5929] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 793.262120][T11958] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 793.310495][T11958] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 793.316558][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.348836][ T5929] usb 5-1: Product: syz [ 793.354713][T11958] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 793.372475][ T5929] usb 5-1: Manufacturer: syz [ 793.377220][ T5929] usb 5-1: SerialNumber: syz [ 793.414964][ T5929] usb 5-1: config 0 descriptor?? [ 793.433726][T11958] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 793.663964][ T5929] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 793.901953][ T6010] usb 5-1: USB disconnect, device number 29 [ 794.439227][T12029] hsr_slave_0: entered promiscuous mode [ 794.471049][T12029] hsr_slave_1: entered promiscuous mode [ 794.497666][T12029] debugfs: 'hsr0' already exists in 'hsr' [ 794.513821][T12029] Cannot create hsr debugfs directory [ 796.380762][T11958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.970246][T11958] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.841206][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.848411][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.003354][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.010541][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.684339][T12029] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 799.778220][T12029] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 799.904550][T12029] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 799.984938][T12029] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 800.278790][T12427] overlayfs: overlapping lowerdir path [ 801.318626][T12029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.421711][T12029] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.464232][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.471354][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.516492][T11958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.564847][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.571966][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.895020][T12029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 802.532717][ T7693] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 802.694461][ T7693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 802.743197][ T7693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 802.812435][ T7693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 802.874141][ T7693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 802.924377][ T7693] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 802.959296][ T7693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.990566][ T7693] usb 1-1: Product: syz [ 803.015504][ T7693] usb 1-1: Manufacturer: syz [ 803.020140][ T7693] usb 1-1: SerialNumber: syz [ 803.053541][ T7693] usb 1-1: config 0 descriptor?? [ 803.229909][T12029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.325479][ T7693] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 803.474736][T11958] veth0_vlan: entered promiscuous mode [ 803.558780][ T6065] usb 1-1: USB disconnect, device number 41 [ 803.573144][T11958] veth1_vlan: entered promiscuous mode [ 803.735208][T11958] veth0_macvtap: entered promiscuous mode [ 803.781601][T11958] veth1_macvtap: entered promiscuous mode [ 804.300390][T11958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.387654][T11958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.555215][ T9036] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.620877][ T9036] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.719595][ T9036] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.821842][T12491] overlayfs: overlapping lowerdir path [ 804.918647][ T9036] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.255262][ T8513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.307669][ T8513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.481168][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.542844][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.559808][T12029] veth0_vlan: entered promiscuous mode [ 806.643394][T12029] veth1_vlan: entered promiscuous mode [ 806.870467][T12029] veth0_macvtap: entered promiscuous mode [ 806.953246][T12029] veth1_macvtap: entered promiscuous mode [ 807.104502][T12029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.211310][T12029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.275492][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.322466][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.361315][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.391823][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.400892][ T6984] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 807.597219][ T6984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.002459][ T6984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.012217][ T6984] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 810.144507][ T6984] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 810.202570][ T6984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.236820][ T6984] usb 8-1: config 0 descriptor?? [ 810.286381][ T6984] usb 8-1: can't set config #0, error -71 [ 810.325903][ T6984] usb 8-1: USB disconnect, device number 2 [ 810.382052][ T8513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.411662][ T8513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.665570][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.702458][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.619879][ T9036] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.051335][T12544] overlayfs: overlapping lowerdir path [ 812.300028][ T7662] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 812.633839][ T7662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 812.682543][ T7662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 812.692244][ T7662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 812.762520][ T7662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 812.806737][ T7662] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 812.843619][ T7662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.851741][ T7662] usb 2-1: Product: syz [ 812.861850][ T9036] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.880069][ T7662] usb 2-1: Manufacturer: syz [ 812.887469][ T7662] usb 2-1: SerialNumber: syz [ 812.933522][ T7662] usb 2-1: config 0 descriptor?? [ 812.995986][ T9036] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.171438][ T7662] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 813.341429][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 813.360218][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 813.368293][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 813.386587][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 813.394682][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 813.427881][ T7662] usb 2-1: USB disconnect, device number 36 [ 813.459704][ T9036] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.973376][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 815.079421][ T9036] bridge_slave_1: left allmulticast mode [ 815.103151][T12579] fuse: Bad value for 'fd' [ 815.107625][ T9036] bridge_slave_1: left promiscuous mode [ 815.130143][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.183421][ T9036] bridge_slave_0: left allmulticast mode [ 815.189181][ T9036] bridge_slave_0: left promiscuous mode [ 815.213363][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.392620][ T6010] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 815.472981][ T5845] Bluetooth: hci4: command tx timeout [ 815.582693][ T6010] usb 7-1: Using ep0 maxpacket: 32 [ 815.655258][T12593] overlayfs: overlapping lowerdir path [ 816.266903][ T6010] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 816.276816][ T6010] usb 7-1: config 1 interface 0 has no altsetting 0 [ 816.397497][ T6010] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 816.409517][ T6010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.418178][ T6010] usb 7-1: Product: syz [ 816.432500][ T6010] usb 7-1: Manufacturer: syz [ 816.437121][ T6010] usb 7-1: SerialNumber: syz [ 816.456629][T12579] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 817.602521][ T5845] Bluetooth: hci4: command tx timeout [ 818.286358][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.292841][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.292511][ T7662] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 819.525651][ T7662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 819.555383][ T7662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 819.916941][ T5845] Bluetooth: hci4: command tx timeout [ 820.532202][ T7662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 820.543372][ T7662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 820.623499][ T7662] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 820.633165][ T7662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.641212][ T7662] usb 2-1: Product: syz [ 820.646242][ T7662] usb 2-1: Manufacturer: syz [ 820.650880][ T7662] usb 2-1: SerialNumber: syz [ 820.660026][ T7662] usb 2-1: config 0 descriptor?? [ 820.890725][ T7662] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 821.094300][T12616] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 821.107286][ T7662] usb 2-1: USB disconnect, device number 37 [ 821.567464][ T6010] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -32 [ 821.942489][ T5845] Bluetooth: hci4: command tx timeout [ 823.274813][T12641] overlayfs: overlapping lowerdir path [ 823.451900][T12629] overlayfs: overlapping lowerdir path [ 823.650350][ T9036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.689190][ T9036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.744937][ T9036] bond0 (unregistering): Released all slaves [ 823.985816][ T7662] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 824.242458][ T7662] usb 1-1: Using ep0 maxpacket: 8 [ 824.269409][ T7662] usb 1-1: config 0 has no interfaces? [ 824.304253][ T7662] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 824.345036][ T7662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.372479][ T7662] usb 1-1: Product: syz [ 824.382465][ T7662] usb 1-1: Manufacturer: syz [ 824.402431][ T7662] usb 1-1: SerialNumber: syz [ 824.423897][ T7662] usb 1-1: config 0 descriptor?? [ 824.529083][T12558] chnl_net:caif_netlink_parms(): no params data found [ 824.670862][ T6984] usb 1-1: USB disconnect, device number 42 [ 824.941016][ T7662] usb 7-1: USB disconnect, device number 2 [ 825.253716][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.268051][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.277216][T12558] bridge_slave_0: entered allmulticast mode [ 825.285686][T12558] bridge_slave_0: entered promiscuous mode [ 826.411689][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.440527][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.472218][T12558] bridge_slave_1: entered allmulticast mode [ 826.500808][T12558] bridge_slave_1: entered promiscuous mode [ 826.723069][ T9036] hsr_slave_0: left promiscuous mode [ 826.738602][ T9036] hsr_slave_1: left promiscuous mode [ 826.777647][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.818462][ T9036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.867855][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.895093][ T9036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.057555][ T9036] veth1_macvtap: left promiscuous mode [ 827.088366][ T9036] veth0_macvtap: left promiscuous mode [ 827.117111][ T9036] veth1_vlan: left promiscuous mode [ 827.135487][ T9036] veth0_vlan: left promiscuous mode [ 828.287925][T12701] overlayfs: overlapping lowerdir path [ 832.962702][T12728] program syz.0.1844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.121477][T12730] loop3: detected capacity change from 0 to 1024 [ 833.179649][T12730] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1845: bad orphan inode 134217728 [ 833.226377][T12730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.276152][ T31] audit: type=1800 audit(1766117238.348:34): pid=12730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1845" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 833.588795][ T31] audit: type=1804 audit(1766117238.398:35): pid=12730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1845" name="/newroot/361/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 834.380542][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 836.865730][ T9036] team0 (unregistering): Port device team_slave_1 removed [ 837.244854][ T9036] team0 (unregistering): Port device team_slave_0 removed [ 837.593550][T12760] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 839.106885][T12763] 9p: Bad value for 'rfdno' [ 840.294213][T12558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.357588][T12558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.413924][T12743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.516922][T12558] team0: Port device team_slave_0 added [ 841.564724][T12558] team0: Port device team_slave_1 added [ 841.686303][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.845385][T12558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.852903][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.930220][T12558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.005244][T12558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.012225][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.192440][T12558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.841134][T12558] hsr_slave_0: entered promiscuous mode [ 845.907923][T12558] hsr_slave_1: entered promiscuous mode [ 845.973365][T12558] debugfs: 'hsr0' already exists in 'hsr' [ 845.979121][T12558] Cannot create hsr debugfs directory [ 847.273400][ T7693] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 847.442502][ T7693] usb 1-1: Using ep0 maxpacket: 8 [ 847.465067][T12558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 847.492595][ T7693] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 847.525132][T12558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 847.532547][ T7693] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 847.544349][ T7693] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 849.799155][T12558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 849.846881][ T7693] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.904041][T12558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 849.929407][ T7693] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 849.995561][ T7693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.075996][ T7693] usb 1-1: can't set config #16, error -71 [ 850.170129][ T7693] usb 1-1: USB disconnect, device number 43 [ 851.248879][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.359801][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.438309][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.445566][ T7527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.500807][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.508056][ T7527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.759960][T12880] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 853.128346][T12899] faux_driver vgem: [drm] Unknown color mode 511; guessing buffer size. [ 855.295721][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.568612][T12558] veth0_vlan: entered promiscuous mode [ 858.637236][T12558] veth1_vlan: entered promiscuous mode [ 858.947153][T12558] veth0_macvtap: entered promiscuous mode [ 859.214319][T12558] veth1_macvtap: entered promiscuous mode [ 859.407280][T12558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.494224][T12558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.609942][ T3528] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.652441][ T3528] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.661400][ T3528] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.713616][ T3528] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.212579][T12964] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 861.333365][ T6072] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 861.812052][ T6072] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 861.897988][ T6072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.973253][ T6072] usb 4-1: config 0 descriptor?? [ 862.002606][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.012297][ T6072] cp210x 4-1:0.0: cp210x converter detected [ 862.067013][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.080059][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.392169][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.108305][ T6072] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 864.957469][ T6072] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 864.975317][ T6072] usb 4-1: cp210x converter now attached to ttyUSB0 [ 864.986143][ T6072] usb 4-1: USB disconnect, device number 38 [ 865.169420][ T6072] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 865.177836][ T6072] cp210x 4-1:0.0: device disconnected [ 865.573266][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1905'. [ 868.186251][T13054] [U]  [ 868.189295][T13054] [U] K{ [ 868.213073][T13054] [U] T 1ŠFFˊ`GJǘGO/MC [ 868.268670][T13054] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 868.393917][T13054] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 868.489068][T13054] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 868.697399][T13054] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 868.907940][T13054] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 869.132237][T13054] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 869.155810][T13054] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< 1 [ 885.245408][T11021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 885.294328][T11021] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 885.304250][T11021] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 885.320445][T11021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 887.447653][T11021] Bluetooth: hci6: command tx timeout [ 889.472467][T11021] Bluetooth: hci6: command tx timeout [ 890.318316][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.428894][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1950'. [ 891.548381][T11021] Bluetooth: hci6: command tx timeout [ 891.803320][T13201] binder_alloc: 13200: binder_alloc_buf, no vma [ 892.076351][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.067124][T13164] chnl_net:caif_netlink_parms(): no params data found [ 893.374850][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.551920][T13219] usb usb8: usbfs: process 13219 (syz.4.1958) did not claim interface 0 before use [ 893.763666][T11021] Bluetooth: hci6: command tx timeout [ 894.064039][T13222] netlink: 324 bytes leftover after parsing attributes in process `syz.8.1957'. [ 895.856065][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.613795][T13164] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.631989][T13164] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.659830][T13164] bridge_slave_0: entered allmulticast mode [ 896.704543][T13164] bridge_slave_0: entered promiscuous mode [ 896.758952][T13164] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.822602][T13164] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.830183][T13164] bridge_slave_1: entered allmulticast mode [ 896.891763][T13164] bridge_slave_1: entered promiscuous mode [ 897.377212][T13244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1965'. [ 897.388403][T13231] 9p: Bad value for 'rfdno' [ 897.413951][T13164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.554478][T13164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.138373][T13164] team0: Port device team_slave_0 added [ 898.275908][T13164] team0: Port device team_slave_1 added [ 900.712607][ T12] bridge_slave_1: left allmulticast mode [ 900.748855][ T12] bridge_slave_1: left promiscuous mode [ 900.791856][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.822802][ T6072] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 901.202524][ T6072] usb 5-1: Using ep0 maxpacket: 32 [ 901.225406][ T12] bridge_slave_0: left allmulticast mode [ 901.231090][ T12] bridge_slave_0: left promiscuous mode [ 901.255293][ T6072] usb 5-1: config 2 has an invalid interface number: 230 but max is 0 [ 901.350551][ T6072] usb 5-1: config 2 has no interface number 0 [ 901.578417][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.605076][ T6072] usb 5-1: config 2 interface 230 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 901.953476][ T6072] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 902.028214][ T6072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.342226][ T6072] usb 5-1: can't set config #2, error -71 [ 905.394249][ T6072] usb 5-1: USB disconnect, device number 30 [ 905.840171][T13279] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1979'. [ 909.797870][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.867772][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.978274][ T12] bond0 (unregistering): Released all slaves [ 910.091385][T13164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.124965][T13164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.212421][T13164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.485527][T13164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.342499][T13164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.558939][T13164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.793270][T13164] hsr_slave_0: entered promiscuous mode [ 912.813827][T13164] hsr_slave_1: entered promiscuous mode [ 912.839277][T13164] debugfs: 'hsr0' already exists in 'hsr' [ 912.855433][T13164] Cannot create hsr debugfs directory [ 913.068603][ T12] hsr_slave_0: left promiscuous mode [ 913.110140][ T12] hsr_slave_1: left promiscuous mode [ 913.137908][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.168980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.198199][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.222566][T13316] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1989'. [ 913.235055][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.341148][ T12] veth1_macvtap: left promiscuous mode [ 913.359205][ T12] veth0_macvtap: left promiscuous mode [ 913.372627][ T12] veth1_vlan: left promiscuous mode [ 913.388137][ T12] veth0_vlan: left promiscuous mode [ 916.852862][T13337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1997'. [ 918.321402][ T12] team0 (unregistering): Port device team_slave_1 removed [ 918.859739][ T12] team0 (unregistering): Port device team_slave_0 removed [ 920.333268][T13358] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2003'. [ 929.175181][T13164] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 929.522816][T13164] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 931.494727][T13164] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 931.567274][T13164] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 932.085619][T13423] ip6gre2: entered promiscuous mode [ 932.127884][T13423] ip6gre2: entered allmulticast mode [ 933.007997][T13070] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 933.176364][T13164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.192705][T13070] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 933.402503][T13164] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.495416][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.502632][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.623824][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.631037][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.183366][T13164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 937.142633][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 939.302495][T11021] Bluetooth: hci4: command 0x0406 tx timeout [ 940.431563][T13070] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 941.151762][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.159290][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.284915][T13070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.314603][T13070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.346051][T13164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.360413][T13070] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 941.433441][T13070] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 941.512918][T13070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.554357][T13070] usb 4-1: config 0 descriptor?? [ 943.009328][T13503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2045'. [ 943.292899][T13070] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 944.494023][ C0] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 945.623213][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 946.823811][T12979] usb 4-1: USB disconnect, device number 39 [ 949.739778][T13547] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2058'. [ 949.793559][T11021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 949.805220][T11021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 949.819492][T11021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 949.837782][T11021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 949.845766][T11021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 950.084282][T13558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2060'. [ 952.820249][T11021] Bluetooth: hci3: command tx timeout [ 954.632826][T13550] chnl_net:caif_netlink_parms(): no params data found [ 954.902911][T11021] Bluetooth: hci3: command tx timeout [ 957.527533][T11021] Bluetooth: hci3: command tx timeout [ 957.583748][T13608] netlink: 324 bytes leftover after parsing attributes in process `syz.8.2073'. [ 957.785785][T13613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2076'. [ 957.985686][T13615] loop3: detected capacity change from 0 to 1024 [ 958.087609][T13615] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2061: bad orphan inode 134217728 [ 958.185193][T13615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.398455][ T31] audit: type=1800 audit(1766117363.468:36): pid=13615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2061" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 958.430976][ T31] audit: type=1804 audit(1766117363.478:37): pid=13615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2061" name="/newroot/401/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 958.827882][T13550] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.315326][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 959.331275][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.373270][T13550] bridge_slave_0: entered allmulticast mode [ 959.436722][T13550] bridge_slave_0: entered promiscuous mode [ 959.493647][T13550] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.541214][T13550] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.550208][T11021] Bluetooth: hci3: command tx timeout [ 959.619381][T13550] bridge_slave_1: entered allmulticast mode [ 959.786519][T13550] bridge_slave_1: entered promiscuous mode [ 959.880148][T13630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 961.493726][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.262793][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 962.741388][T13550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.855365][T13550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.510025][T13550] team0: Port device team_slave_0 added [ 965.605604][T13550] team0: Port device team_slave_1 added [ 966.696948][T13550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.710077][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.535462][T13550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.656224][T13550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.803487][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.092540][T13550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.822033][T13727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.887445][T13727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.148916][ T5975] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.190564][ T5975] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.200986][ T5975] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.211401][ T49] bridge_slave_1: left allmulticast mode [ 973.350331][ T49] bridge_slave_1: left promiscuous mode [ 973.371471][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.438121][ T49] bridge_slave_0: left allmulticast mode [ 973.455322][ T49] bridge_slave_0: left promiscuous mode [ 973.466998][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.593356][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.643264][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.655859][ T49] bond0 (unregistering): Released all slaves [ 979.778264][T13732] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.895868][ T49] hsr_slave_0: left promiscuous mode [ 979.916245][ T49] hsr_slave_1: left promiscuous mode [ 979.926881][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.947589][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.744461][T13784] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2119'. [ 983.136696][ T49] team0 (unregistering): Port device team_slave_1 removed [ 984.082094][ T49] team0 (unregistering): Port device team_slave_0 removed [ 984.120733][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 984.135510][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 984.161731][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 984.183933][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 984.191822][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 986.242686][T13070] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 986.272500][ T5845] Bluetooth: hci6: command tx timeout [ 986.442690][T13070] usb 2-1: Using ep0 maxpacket: 8 [ 986.454349][T13070] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 986.472554][T13070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.557309][T13070] pvrusb2: Hardware description: Terratec Grabster AV400 [ 986.572952][T13070] pvrusb2: ********** [ 986.573494][T11021] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 986.588438][T11021] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 986.599455][T11021] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 986.614382][T11021] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 986.623167][T11021] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 986.660459][T13070] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 986.712458][T13070] pvrusb2: Important functionality might not be entirely working. [ 986.720630][T13070] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 986.812424][T13070] pvrusb2: ********** [ 986.874901][ T2337] pvrusb2: Invalid write control endpoint [ 987.136681][ T9] usb 2-1: USB disconnect, device number 38 [ 987.214436][ T2337] pvrusb2: Invalid write control endpoint [ 987.220375][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 987.262568][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 987.270164][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 987.312681][ T2337] pvrusb2: Device being rendered inoperable [ 987.332570][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 987.350569][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 987.400629][ T2337] pvrusb2: Attached sub-driver cx25840 [ 987.422869][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 987.502395][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 988.342808][T11021] Bluetooth: hci6: command tx timeout [ 988.689441][T11021] Bluetooth: hci7: command tx timeout [ 989.267957][T13796] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 989.311364][T13550] hsr_slave_0: entered promiscuous mode [ 989.357470][T13550] hsr_slave_1: entered promiscuous mode [ 989.385631][T13550] debugfs: 'hsr0' already exists in 'hsr' [ 989.419654][T13550] Cannot create hsr debugfs directory [ 989.942198][T13832] overlayfs: failed to resolve './file1': -2 [ 990.573374][T11021] Bluetooth: hci6: command tx timeout [ 990.750396][T11021] Bluetooth: hci7: command tx timeout [ 993.173749][T11021] Bluetooth: hci6: command tx timeout [ 993.179220][ T5845] Bluetooth: hci7: command tx timeout [ 993.560007][T13846] binder: BINDER_SET_CONTEXT_MGR already set [ 993.582524][T13846] binder: 13845:13846 ioctl 4018620d 200000004a80 returned -16 [ 993.869128][T13735] Set syz1 is full, maxelem 65536 reached [ 994.262631][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 995.863530][T13809] Bluetooth: hci7: command tx timeout [ 998.572224][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.259924][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.419608][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.599216][T13806] chnl_net:caif_netlink_parms(): no params data found [ 1002.673171][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.679529][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.902602][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1106.752366][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1106.759389][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13803/1:b..l [ 1106.768122][ C0] rcu: (detected by 0, t=10503 jiffies, g=67429, q=165 ncpus=2) [ 1106.775852][ C0] task:syz.1.2123 state:R running task stack:22984 pid:13803 tgid:13803 ppid:5829 task_flags:0x40064c flags:0x00080001 [ 1106.790754][ C0] Call Trace: [ 1106.794064][ C0] [ 1106.797002][ C0] ? __schedule+0x10b9/0x6150 [ 1106.801732][ C0] __schedule+0x1139/0x6150 [ 1106.806286][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.811964][ C0] ? __pfx___schedule+0x10/0x10 [ 1106.816853][ C0] ? lock_acquire+0x179/0x330 [ 1106.821602][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.827275][ C0] preempt_schedule_irq+0x51/0x90 [ 1106.832337][ C0] irqentry_exit+0x1d8/0x8c0 [ 1106.837004][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1106.843008][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 1106.848234][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 fd ee 0e 0f 82 74 02 00 00 8b 35 ea 2d ef 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1106.868041][ C0] RSP: 0018:ffffc900031b6ec0 EFLAGS: 00000206 [ 1106.874130][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 0000000068c1bacb [ 1106.882121][ C0] RDX: 0000000000000000 RSI: ffffffff8daa6073 RDI: ffffffff8bf2b580 [ 1106.890113][ C0] RBP: 0000000000000002 R08: 00000000ffffffff R09: 00000000ffffffff [ 1106.898363][ C0] R10: 0000000000000002 R11: ffff88802a67e6b0 R12: 0000000000000000 [ 1106.906435][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1106.914449][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.920341][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1106.926648][ C0] unwind_next_frame+0xd1/0x20b0 [ 1106.931638][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 1106.936882][ C0] ? dentry_unlink_inode+0x29c/0x480 [ 1106.942219][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1106.948411][ C0] arch_stack_walk+0x94/0x100 [ 1106.953143][ C0] ? dentry_unlink_inode+0x29c/0x480 [ 1106.958567][ C0] stack_trace_save+0x8e/0xc0 [ 1106.963277][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1106.968683][ C0] ? __lock_acquire+0x436/0x2890 [ 1106.973649][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.979316][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1106.984600][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1106.990267][ C0] save_stack+0x160/0x1f0 [ 1106.994625][ C0] ? __pfx_save_stack+0x10/0x10 [ 1106.999513][ C0] ? free_unref_folios+0xa22/0x1610 [ 1107.004753][ C0] ? folios_put_refs+0x4be/0x750 [ 1107.009740][ C0] ? shmem_undo_range+0x58f/0x1140 [ 1107.014949][ C0] ? shmem_evict_inode+0x39e/0xbe0 [ 1107.020284][ C0] ? evict+0x3c2/0xad0 [ 1107.024392][ C0] ? iput.part.0+0x621/0x1190 [ 1107.029109][ C0] ? iput+0x35/0x40 [ 1107.032956][ C0] ? dentry_unlink_inode+0x29c/0x480 [ 1107.038289][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.043968][ C0] __reset_page_owner+0x84/0x1a0 [ 1107.049126][ C0] free_unref_folios+0xa22/0x1610 [ 1107.054381][ C0] ? rcu_is_watching+0x12/0xc0 [ 1107.059171][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1107.065028][ C0] folios_put_refs+0x4be/0x750 [ 1107.069848][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1107.075362][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.081043][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.086803][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1107.093186][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.098870][ C0] shmem_undo_range+0x58f/0x1140 [ 1107.103868][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1107.109288][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.114993][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.120683][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.126356][ C0] ? find_held_lock+0x2b/0x80 [ 1107.131130][ C0] shmem_evict_inode+0x39e/0xbe0 [ 1107.136117][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.141794][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 1107.147551][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1107.153059][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1107.159160][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.164923][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.170595][ C0] ? find_held_lock+0x2b/0x80 [ 1107.175322][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.180999][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1107.186509][ C0] evict+0x3c2/0xad0 [ 1107.190448][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.196110][ C0] ? find_held_lock+0x2b/0x80 [ 1107.200839][ C0] ? __pfx_evict+0x10/0x10 [ 1107.205298][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.210975][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.216740][ C0] iput.part.0+0x621/0x1190 [ 1107.221324][ C0] iput+0x35/0x40 [ 1107.225083][ C0] dentry_unlink_inode+0x29c/0x480 [ 1107.230239][ C0] __dentry_kill+0x1d0/0x600 [ 1107.234981][ C0] finish_dput+0x76/0x480 [ 1107.239337][ C0] dput.part.0+0x451/0x570 [ 1107.243783][ C0] dput+0x1f/0x30 [ 1107.247439][ C0] __fput+0x51c/0xb70 [ 1107.251463][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1107.256707][ C0] task_work_run+0x150/0x240 [ 1107.261385][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1107.266530][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.272195][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1107.277450][ C0] do_exit+0x87f/0x2bd0 [ 1107.281655][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.287328][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 1107.293030][ C0] ? __pfx_do_exit+0x10/0x10 [ 1107.297665][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.303435][ C0] do_group_exit+0xd3/0x2a0 [ 1107.307974][ C0] get_signal+0x2671/0x26d0 [ 1107.312535][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.318205][ C0] ? __pfx_get_signal+0x10/0x10 [ 1107.323111][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.328835][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 1107.334429][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1107.340651][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.346343][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.352003][ C0] ? __bad_area_nosemaphore+0x350/0x690 [ 1107.357597][ C0] irqentry_exit+0x38a/0x8c0 [ 1107.362251][ C0] asm_exc_page_fault+0x26/0x30 [ 1107.367127][ C0] RIP: 0033:0x7fef2cc4f6b7 [ 1107.371558][ C0] RSP: 002b:00007fef2dc5f120 EFLAGS: 00010202 [ 1107.378081][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fef2cd8f749 [ 1107.386075][ C0] RDX: 00007fef2dc5f140 RSI: 00007fef2dc5f270 RDI: 000000000000000b [ 1107.394059][ C0] RBP: 00007fef2ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1107.402043][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1107.410030][ C0] R13: 00007fef2cfe6128 R14: 00007fef2cfe6090 R15: 00007ffdb02269e8 [ 1107.418132][ C0] [ 1107.421157][ C0] rcu: rcu_preempt kthread starved for 10568 jiffies! g67429 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1107.432460][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1107.442532][ C0] rcu: RCU grace-period kthread stack dump: [ 1107.448430][ C0] task:rcu_preempt state:R running task stack:28056 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1107.462008][ C0] Call Trace: [ 1107.465391][ C0] [ 1107.468345][ C0] ? __schedule+0x10b9/0x6150 [ 1107.473063][ C0] __schedule+0x1139/0x6150 [ 1107.477603][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.483270][ C0] ? __lock_acquire+0x436/0x2890 [ 1107.488239][ C0] ? __mod_timer+0x8f2/0xd30 [ 1107.492876][ C0] ? __pfx___schedule+0x10/0x10 [ 1107.497772][ C0] ? find_held_lock+0x2b/0x80 [ 1107.502488][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.508250][ C0] schedule+0xe7/0x3a0 [ 1107.512356][ C0] schedule_timeout+0x123/0x290 [ 1107.517237][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1107.522641][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1107.527964][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.533620][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1107.539468][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.545125][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1107.550615][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1107.555414][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.561079][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1107.566392][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1107.571810][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1107.576775][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1107.581668][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1107.587517][ C0] rcu_gp_kthread+0x26d/0x380 [ 1107.592221][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1107.597441][ C0] ? rcu_is_watching+0x12/0xc0 [ 1107.602223][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1107.607463][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.613122][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.618782][ C0] ? __kthread_parkme+0x19e/0x250 [ 1107.623822][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1107.629054][ C0] kthread+0x3c5/0x780 [ 1107.633148][ C0] ? __pfx_kthread+0x10/0x10 [ 1107.637766][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.643429][ C0] ? rcu_is_watching+0x12/0xc0 [ 1107.648207][ C0] ? __pfx_kthread+0x10/0x10 [ 1107.652822][ C0] ret_from_fork+0x983/0xb10 [ 1107.657438][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.662573][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.668314][ C0] ? __switch_to+0x7af/0x10d0 [ 1107.673119][ C0] ? __pfx_kthread+0x10/0x10 [ 1107.677753][ C0] ret_from_fork_asm+0x1a/0x30 [ 1107.682582][ C0] [ 1107.685610][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1107.691949][ C0] CPU: 0 UID: 0 PID: 13898 Comm: syz.3.2143 Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.702924][ C0] Tainted: [L]=SOFTLOCKUP [ 1107.707263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1107.717415][ C0] RIP: 0010:native_apic_msr_write+0x28/0x40 [ 1107.723354][ C0] Code: 90 90 f3 0f 1e fa 8d 87 30 ff ff ff 83 e0 ef 74 20 89 f8 83 e0 ef 83 f8 20 74 16 c1 ef 04 31 d2 89 f0 8d 8f 00 08 00 00 0f 30 <66> 90 e9 fc 23 a5 ff e9 f7 23 a5 ff 89 f6 31 d2 89 cf e9 21 9b 75 [ 1107.742979][ C0] RSP: 0018:ffffc90004647bf8 EFLAGS: 00000246 [ 1107.749065][ C0] RAX: 00000000000000f6 RBX: 0000000000000001 RCX: 000000000000083f [ 1107.757042][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000003f [ 1107.765106][ C0] RBP: ffff8880b8431660 R08: 0000000000000001 R09: 0000000000000000 [ 1107.773091][ C0] R10: 0000000000000001 R11: ffff888025b44830 R12: 1ffff920008c8f84 [ 1107.781096][ C0] R13: 1ffff11017086201 R14: 0000000000000000 R15: 0000000000000000 [ 1107.789098][ C0] FS: 00007f91df1f66c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 1107.798075][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1107.804697][ C0] CR2: 00007f91df1f5f40 CR3: 00000000928c7000 CR4: 0000000000350ef0 [ 1107.812683][ C0] Call Trace: [ 1107.815999][ C0] [ 1107.818932][ C0] arch_irq_work_raise+0x4f/0x70 [ 1107.824018][ C0] __irq_work_queue_local+0x1d2/0x550 [ 1107.829422][ C0] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1107.835342][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1107.840405][ C0] ? find_held_lock+0x2b/0x80 [ 1107.845228][ C0] irq_work_queue+0xab/0x100 [ 1107.849848][ C0] bpf_send_signal_common+0x3a4/0x540 [ 1107.855251][ C0] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 1107.861194][ C0] ? lock_acquire+0x179/0x330 [ 1107.865952][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.871648][ C0] bpf_send_signal+0x1d/0x30 [ 1107.876274][ C0] bpf_prog_948316cddd0b7b1c+0x41/0x49 [ 1107.881767][ C0] bpf_trace_run2+0x239/0x5c0 [ 1107.886475][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1107.891703][ C0] ? __might_fault+0xe3/0x190 [ 1107.896410][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1107.902087][ C0] __bpf_trace_sys_enter+0x37/0x60 [ 1107.907328][ C0] syscall_trace_enter+0x1b5/0x220 [ 1107.912918][ C0] do_syscall_64+0x42b/0xf80 [ 1107.917651][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.923569][ C0] RIP: 0033:0x7f91e0f2b829 [ 1107.928004][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1107.947822][ C0] RSP: 002b:00007f91df1f5b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 1107.956264][ C0] RAX: ffffffffffffffda RBX: 00007f91e11e6098 RCX: 00007f91e0f2b829 [ 1107.964250][ C0] RDX: 00007f91df1f5b40 RSI: 00007f91df1f5c70 RDI: 0000000000000011 [ 1107.972241][ C0] RBP: 00007f91e11e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.980242][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.988313][ C0] R13: 00007f91e11e6128 R14: 00007ffe6b810840 R15: 00007ffe6b810928 [ 1107.996427][ C0] [ 1181.782574][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1289.302430][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 287s! [ 1289.312603][ C0] Showing busy workqueues and worker pools: [ 1289.318993][ C0] workqueue events: flags=0x100 [ 1289.323999][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 1289.324078][ C0] pending: psi_avgs_work, ovs_dp_masks_rebalance, 2*psi_avgs_work, vmstat_shepherd, 3*ovs_dp_masks_rebalance, rht_deferred_worker [ 1289.324355][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=18 refcnt=19 [ 1289.324427][ C0] pending: psi_avgs_work, nsim_fib_event_work, 9*nsim_dev_hwstats_traffic_work, psi_avgs_work, 5*ovs_dp_masks_rebalance, switchdev_deferred_process_work [ 1289.324709][ C0] workqueue events_highpri: flags=0x110 [ 1289.374794][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 1289.374874][ C0] pending: fill_page_cache_func [ 1289.374935][ C0] pwq 7: cpus=1 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 1289.375007][ C0] pending: fill_page_cache_func [ 1289.375061][ C0] workqueue events_long: flags=0x100 [ 1289.405686][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=7 refcnt=8 [ 1289.405767][ C0] pending: 4*defense_work_handler, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup [ 1289.405936][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 1289.406012][ C0] pending: 5*defense_work_handler, 2*br_multicast_gc_work, 2*br_fdb_cleanup [ 1289.406150][ C0] workqueue events_unbound: flags=0x2 [ 1289.445402][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1289.445489][ C0] pending: flush_memcg_stats_dwork, toggle_allocation_gate [ 1289.445595][ C0] workqueue events_unbound: flags=0x2 [ 1289.465433][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=7 refcnt=8 [ 1289.465514][ C0] pending: cfg80211_wiphy_work, 2*macvlan_process_broadcast, idle_cull_fn, macvlan_process_broadcast, idle_cull_fn, macvlan_process_broadcast [ 1289.465748][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=25 refcnt=26 [ 1289.465810][ C0] in-flight: 6042:cfg80211_wiphy_work cfg80211_wiphy_work ,6056:nsim_dev_trap_report_work [ 1289.466008][ C0] pending: 2*nsim_dev_trap_report_work, 6*cfg80211_wiphy_work, 7*nsim_dev_trap_report_work, crng_reseed, 2*macvlan_process_broadcast, idle_cull_fn, macvlan_process_broadcast, 2*idle_cull_fn [ 1289.466337][ C0] workqueue events_power_efficient: flags=0x180 [ 1289.530595][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=8 refcnt=9 [ 1289.530678][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, do_cache_clean, neigh_managed_work, gc_worker, 3*check_lifetime [ 1289.530942][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=8 refcnt=9 [ 1289.531021][ C0] pending: neigh_managed_work, neigh_periodic_work, 6*check_lifetime [ 1289.531184][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 1289.573062][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.573141][ C0] pending: kfree_rcu_monitor [ 1289.573208][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.573272][ C0] pending: kfree_rcu_monitor [ 1289.573330][ C0] workqueue netns: flags=0x6000a [ 1289.602066][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 1289.602133][ C0] in-flight: 37:cleanup_net [ 1289.602224][ C0] inactive: cleanup_net [ 1289.602282][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1289.623693][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.623773][ C0] pending: vmstat_update [ 1289.623833][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.623908][ C0] pending: vmstat_update [ 1289.623968][ C0] workqueue writeback: flags=0x4a [ 1289.652725][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.652800][ C0] pending: wb_workfn [ 1289.652856][ C0] workqueue kblockd: flags=0x18 [ 1289.668785][ C0] pwq 7: cpus=1 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 1289.668860][ C0] pending: blk_mq_timeout_work [ 1289.668968][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 1289.687175][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=12 [ 1289.687251][ C0] pending: addrconf_verify_work [ 1289.687298][ C0] inactive: 8*addrconf_verify_work [ 1289.687345][ C0] workqueue krxrpcd: flags=0x2001a [ 1289.710205][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=12 [ 1289.710282][ C0] pending: rxrpc_peer_keepalive_worker [ 1289.710342][ C0] inactive: 8*rxrpc_peer_keepalive_worker [ 1289.710410][ C0] workqueue bat_events: flags=0x6000a [ 1289.735570][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=50 [ 1289.735641][ C0] in-flight: 5975:batadv_dat_purge [ 1289.735724][ C0] inactive: batadv_tt_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 3*batadv_tt_purge, batadv_purge_orig, 4*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 11*batadv_iv_send_outstanding_bat_ogm_packet, 6*batadv_mcast_mla_update, batadv_tt_purge, 2*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_tt_purge, 2*batadv_bla_periodic_work [ 1289.736448][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.797284][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.797362][ C0] pending: wg_packet_handshake_send_worker [ 1289.797424][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1289.815989][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.816067][ C0] pending: wg_packet_encrypt_worker [ 1289.816132][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.833991][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.834066][ C0] pending: wg_packet_handshake_send_worker [ 1289.834130][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1289.852512][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.852602][ C0] pending: wg_packet_encrypt_worker [ 1289.852662][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.870592][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.870673][ C0] pending: wg_queued_expired_zero_key_material [ 1289.870727][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.870791][ C0] pending: wg_packet_handshake_send_worker [ 1289.870845][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1289.903039][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.903119][ C0] pending: wg_packet_encrypt_worker [ 1289.903183][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.921026][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1289.921106][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1289.921198][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1289.942924][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.943011][ C0] pending: wg_packet_encrypt_worker [ 1289.943073][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.960924][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.961004][ C0] pending: wg_packet_handshake_send_worker [ 1289.961067][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1289.979457][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1289.979534][ C0] pending: wg_packet_encrypt_worker [ 1289.979606][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.997461][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1289.997536][ C0] pending: wg_packet_handshake_send_worker [ 1289.997606][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1290.015980][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.016062][ C0] pending: wg_packet_encrypt_worker [ 1290.016123][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1290.034154][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1290.034230][ C0] pending: wg_packet_handshake_send_worker [ 1290.034292][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1290.052676][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.052753][ C0] pending: wg_packet_encrypt_worker [ 1290.052815][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1290.070760][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1290.070846][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1290.070949][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1290.092774][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1290.092864][ C0] pending: wg_packet_encrypt_worker [ 1290.092936][ C0] workqueue bond1: flags=0x2000a [ 1290.110865][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 1290.110935][ C0] pending: bond_3ad_state_machine_handler [ 1290.111011][ C0] inactive: bond_mii_monitor [ 1290.111129][ C0] workqueue hci3: flags=0x20012 [ 1290.133922][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1290.134001][ C0] pending: hci_conn_timeout [ 1290.134050][ C0] workqueue hci6: flags=0x20012 [ 1290.151358][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1290.151435][ C0] pending: hci_conn_timeout [ 1290.151478][ C0] workqueue hci7: flags=0x20012 [ 1290.168896][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1290.168975][ C0] pending: hci_conn_timeout [ 1290.169040][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=287s workers=31 idle: 3472 6922 13190 49 7376 8513 9036 6073 6038 12 13681 6016 7527 3650 11246 13 2986 6023 997 13146 13296 3528 6022 351 1156 7831 60 [ 1290.169624][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: