last executing test programs: 31m28.751286386s ago: executing program 32 (id=8): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x500, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x5c22, 0x3, 0x1, 0x4, 0x2, 0x1, 0xe, 0x7, 0xa, 0xfe, 0x2, 0x1, 0x3, 0x0, 0x6, 0xc, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x7fff, 0xb27, 0x5, 0x7fff, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffffe]}) 29m48.602438561s ago: executing program 33 (id=222): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 29m38.283122993s ago: executing program 34 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x37, 0xf, 0x6, 0x4, 0x3, 0x3e, 0xfff, 0xf4, 0x38, 0x388, 0xfff, 0x0, 0x20, 0x1, 0x5, 0x80, 0x3}, [{0x5, 0x7, 0x7, 0x2, 0x5, 0x1, 0x0, 0x2}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1001) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 29m30.887388487s ago: executing program 35 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @auto=[0x0, 0x32, 0x32, 0x37, 0x61, 0x39, 0x34, 0x32, 0x32, 0x62, 0x65, 0x4, 0x39, 0x31, 0x5b, 0x33]}, 0x0, 0x0, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x8800) r2 = socket$kcm(0x10, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000100)={0xc000004, 0x0, "5cb07d82287af45095b3f4e9ca2080b20470dbaca86f7be9b033dccf0900"}) r4 = epoll_create1(0x0) ppoll(&(0x7f0000000580)=[{r4, 0x41}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000020340)={0x20000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5100, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000", 0x17}], 0x1}, 0x0) 28m33.11091798s ago: executing program 36 (id=308): r0 = socket(0x2, 0x80805, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000800)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x8000}, 0x890) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0x345, 0xdc, 0xfa4, 0x13b0, 0xa, "d50eccaa06b0439e502be82c4932d18c4582e2", 0x9, 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x4020400) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x20, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x80000000}}, 0x44) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 27m46.049442663s ago: executing program 37 (id=391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 27m39.321262015s ago: executing program 38 (id=401): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 27m3.161963345s ago: executing program 39 (id=424): socket(0x2, 0x80805, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x8000}, 0x890) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x345, 0xdc, 0xfa4, 0x13b0, 0xa, "d50eccaa06b0439e502be82c4932d18c4582e2", 0x9, 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x4020400) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x2, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) 24m42.911411817s ago: executing program 40 (id=495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 23m50.113948494s ago: executing program 41 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) eventfd(0x2) r0 = getpid() sched_getparam(r0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) tee(r2, r5, 0xf3a, 0x4) 23m49.826806385s ago: executing program 42 (id=576): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000006a2038e40018120000acf6005e6cc7a461697d85c7f73a93b4f4ca74c6c28853329e633f86b66ee60045d6770e7456733aedb5cedaa30edbfdba84b3cd1ba111cf74ea90cba6560d547b5edf95615be999d0157d3892e3b6aab264811cf388176bbfe0b44f75f06b960671b8845cedb59bc6b04a8fbc2f9e9aa6bfc989f7967bd9d0c9ebf65be6559adf612dd523bb33aaa093dd5799a8e4c6a4e6a0b7d6b3b53e45b94a35c441770cab73cc", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='ext4_error\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000200002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f00000000c0)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 23m15.936014391s ago: executing program 43 (id=625): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 22m47.940050396s ago: executing program 44 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095000000000000007ce6eda45130921fc8250c77c17a6ad38b43ab1fdc1624e852bf1ed5e9a2a1573693cdad2f8bd5b128caeb5aca436a284295e124021b6418bc3aed3ffe222b08c121de85e4262d6f8aeea2873be63063a1e601479ee57cb53eae1b931b65195bde131720b317fbfc7adb8a1b082f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 22m19.90118969s ago: executing program 45 (id=717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r2, 0x66a8, 0x4000, 0xf, 0x0, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 22m8.132257395s ago: executing program 46 (id=728): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 22m4.493331752s ago: executing program 47 (id=720): prctl$PR_SET_PDEATHSIG(0x1, 0x23) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,rodir,rodir,uni_xlate=1,shortname=win95,uni_xlate=0,shortname=mixed,codepage=855,iocharset=cp1251,uni_xlate=0,iocharset=cp861,utf8=0,iocharset=macceltic,utf8=0,\x00ni_xlate=1,\x00'], 0x3, 0x359, &(0x7f0000001bc0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) statfs(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/194) 21m54.95281666s ago: executing program 48 (id=737): socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048860}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 21m44.875765298s ago: executing program 49 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r6, 0x0}]) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x64000600) 21m15.834569217s ago: executing program 50 (id=750): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r8, 0x0, 0x8000f28, 0x0) write$binfmt_format(r8, &(0x7f00000001c0)='0\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000050000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 20m47.302353217s ago: executing program 51 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x37, 0xf, 0x6, 0x4, 0x3, 0x3e, 0xfff, 0xf4, 0x38, 0x388, 0xfff, 0x0, 0x20, 0x1, 0x5, 0x80, 0x3}, [{0x5, 0x7, 0x7, 0x2, 0x5, 0x1, 0x0, 0x2}], "c41075013f48c8ddeb2e1199ec8d338699e372599d48619072eb51a06d9f8fd1eb69866eb18b57fdf36d3e18467aa41fdd5752cdc97802edd93a52ef4b80ce37d1250efbce1b61ccb7567d5dcde287d873cf26671af236250cee3256ca9f93ee5a385a5fd5f1ebdd667821a73d6d558f5d2ebe83eac9e5dbc280bdd4e6b3312232ce2effadca47315e2fe8aa79c5e94cdb3c262026ccf80f9df31cc3862d1825eb376c40a2c635be0523b9cdd8cf9020dd5cc8f2287f07a22470606110520759244698810d4bc15be03c0e4752636c1dc0407166b2f4c21064c9acd44fec14999cef1aea4cc4b3fd3d8016f3d14cfb7f5ec586af10387071de4e8b856057ec05cdc89e3102821d44bda1cbce931641100631cfd5c446796ca1442cd456b2ee0dd7f3b71023c7fcb44a645c51c999cd3af35d55a1cbbc8c4297d5065d4c62abd9977c87545cfe2193f3b0fcb80fda4016f964c83eccbc9bc664df58b21ff3c4efcecdf54c8c1d59e1737dd58a4584d5b0c55c80eacc782ff166e027d108e1957e6d7682ed66f33e2d1e6bbc73233465702f482961dfbd6597cabd39ee4fb72261f19c2070f21cc3f917e1883ddc64f10d2eb16c88cbe4951e2904a633502e913442694311a7d85ffa80fdc2babca50bddbe8ee55a96db1f7c3b66696263234b8bc019c55d7f7c8dedaab54e2b04cfc8b152c509c565c1deab0f355f9a3e5af89d999130d49740944a60b6c8681197d062514b818f3a331af6ae8b451d425827d43999c184bd71a9e2b47e0e6c614b14159ba34178bc3eef1307b0af143cf58eaa7c397c6e9f61f04df37021d591f7560135fdb0845b7801760d14b6909e057504266f650886959987f57678453f52795ed240269294edaecccdc51e4229d555c0194bcb31762375235ea4f96d4bac0172d5c0444b6669e11768715b07f4f16b37963e43f77d41891dee481a06d0d790963018043a622942cfe84a3753dd6f524b4588114279b6c1fb974aabe3a0a6bdef6201ed2edb8cb4217b3ed1a96dedc73eaced8d9224dd0c7dac2311e2284d7026c8e639eb29778c2be0c778d4591df4b3e9bf06ac8b9b80e3cec802386ace7ad6f9618359539fe2b8bac017d9ba18f1f5a8eacd8edafb8efb33bdd29880af76e815aaff737980820dac60535d5975e4b104b68d8d3c6f3b2d941ea380603874ed6f02e88da70fd3cf9c7ef6812d7efd23c9d42fb20679bdbe18d8e349a7e0167b36f645294eff023bcb214acff82e6051518a504a5a90a1f9312916e7dbf70f491d6fed96ee03660cf8640146d0f78698ef5c15a04a87fcd4c764296ae23408659b5f7c10b41807edfc46fa3afa95c65e6425649058bc0bb54dbdd57dd7b22018a8c573debaa9a827dcbe1bb3c435242b66e4ee54221ab9d38d37b2f5ddd35ef786d54e6d4f8a75d73ae511619a4bae62c3e8562c08ed71a40c690454394a2a23645547d19021b9a9e775fb5367fb03bc403c722b32b39a63b67d7ad37ec6f6af838d44636afa78c9629c1f36bbcb3a3601da087fef076e2dc2fb8c572d222736760e7bf34e1a1a4b62f4b9e2da59d50e7ea0d780cd3c5a338664e60719fee04e6f4a6469e621706b4a5df526a2cfb44f15f77a029bf7e2b6b9d98eab1a0c43fcf492020d894aa4a9a9e03d53dc69a18c839add8cf8df51597d1a3a933e26f8bc969fe070194bfd0ae87ef5c77057392ed5006703a54da0fd63758b3a8d74f3999f8ab8f97d0788d87a6bffff532d73396473f7ea0130cc06ccd62c6760c6a8faecaa3054be03312145e93fa6e7490bf535c9cdcbafd9a7631f55ece2382be2de7ac723b9554abd59ee44bce2c48c9670ac7698c188521d50f492589cf924eb66bd2d6b4eb7e7d515a18826e8c14604a29c11206940777724ed737f48832cf2021d3bc632f77c334ef43acfe57522d510f67dbb078ecefde914652c23b1542fce6f02fa2a20b0f515f39e3da1200af389393cd93f65741ca4281cf576d619b7caf9146af4831e048e170c37e821febe48b282203e7cc57839c74d609e8b5057118e6c27849ccbafedd8739b67113b4ac190c652e7ead60915e2ccc79da786d36f251a2ab503a8886b1eae448368edc54424f0d512891f00b9029152daf6637791a8510ae6ed683dc56bce1cfc5fe65f9857014b7adbbbd7f9866e5422dbefafa654b1d982e4b7c7a4a91990e678fe894604df577c7560ff0a16c3c29495e4a43e361f54536a307af90f10461dd21e50514bac828d6871ba624d547d04bc1f3d8a78eb7f70f3b54eb209fed41a94318eb5eb7467ce1f682040b8f98f092fa0453a663d4e4c284878e45e10b9931fb4116f0be22d2cddba13ab926e72bc6716b976167d9f4339dd3e7e414853b142114fb9a402945afbf14bc789a364640a493535572d756f599710db2e802f3bf7605fd5b165ecf5c0f6fe3551bf7bb466f289b90cf42f38085a415473d8f36a6d5cd5e866a01dc6ade55e4245ad595f90ace9b9d726fd5e5d2ec8a9993fe42f4498effa2b85de03c53ec2badfa5615a2357a2f538387264c5d9c5c0787c36c479141e84a7bcb57fcf84b42b1a35531d5a6b9829d1bcd8d583fd397a7616c315c1081e08b22e0a5683373646cf3b77a6e47a183cfc7b0040909a93ff4b8cfa644dc714725346b62e499b186d07f6e10d457610087c0f2dbd18dcc20f8574db5495c511f1b0fefed69e45996c77b7acb2b80a1bcf9d7630e513b3cfb533b95733026bb9558837e7dfbbb0022bf2c091d7dd34136df56a348bd62f4040025989d986df5a2bb21334033e568124405ba3e190272fcfd8ab900ca5b60cf2d48f609bbe597bc2f5e53395ad24ff6a70684ec9832427cffcd194a0e4b174764e7d957b5d4ff59c3bf8657924d5678ff7fade6f809ba97d66530a7bce742b9a2d7b0d73956d1933bb8a1f5c3acfefa78c401ade4a4c83439fd272b82757f0d3d95eb9bc0b20b0bc19a7cf62f484b73b0bc8f0b978389ac65abd14f7bec0fca214eb38d68c43136f3e47f5dcfb6794196ea0aed553fc6e69242dc89be5103fc28798dd590ccfbd14e8d48ba21e18e6d9d3470970393904471105526906183ea87cbdd57fd0095b667b20039956ce151c09b0bd13533ff6314107a7da9509630c2ac7db25086be9ffe25c3953f4f66ff83a9162b87acb1ac069005f5d4bb63be035faefc396a2963ab106d86ec6b9619f61464bc8b278d0924094296d72eba340b2c41990dad3decbd1912b90923078fe1ab3e29fc492844dc9b167be1034b096102735d5cfdf715be35349cb72cdaa7d59a83074651f262527ebc327b77c23627f80aa873a2034e9e3bc981f9d8699368033be4a68f4d988e316062c91bc2d517beff835526733c64c39c0d936807bdc4876465b2e2f384ba7b0acbbb6c1270c96a46428e971811525d9ad9720993b59f8dbb538c5a4f88ed1c1a90fa057935def965dcb795742b7751b5bd5a03d5f0ee4f464b9fae94657e17c609333e9cd61a904140ada68b24a78f836f076ae776b020cd4209b1974660f0f1a512fb706f46d15e6f77e8bbdcbbf68d7fda2e523b397e1aca7cdb17134b0e2ebeb21966f9558b87a4e346bce58c92774e41d74179501449bf6c4ee41d336061c02bfd2707b58a38d687f1ebe3660feb4a5159159f1f1b408c6fcffae49077460ef817ec07f0cba44efcde1e21b0a5b80704cb6e794cbce4a2eac61ef31ba775d7cd012fde8b415ae1b995d91158048902a02f84c254b595e78d0fbe5991957b48f4e611ba85856e9dcc84762f4d6c60ce68ba668b44cb082ae756cb420e89792d4ef116d15b8b297c05876601235a0239d935893", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0xfff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 20m34.767192584s ago: executing program 52 (id=775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r1) socket$inet(0xa, 0x801, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r0]) 20m18.486489305s ago: executing program 53 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x190, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x58, 0x1, {{'xcbc(aes)\x00'}, 0x80, "bd47604b63ab6f1ee0fab0861fd44714"}}]}, 0x190}}, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) 19m21.416494542s ago: executing program 54 (id=809): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 18m41.578337388s ago: executing program 55 (id=839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0xc4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x4}]}]}, 0xc4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 17m29.169088814s ago: executing program 56 (id=908): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 16m59.047032127s ago: executing program 57 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x800, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x0, 0x0, 0x0, 0x8000, 0x7, 0x0, 0x1, 0x0, 0x80000001, 0x81}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40080e0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800"], 0x3c}}, 0x0) 16m16.23262626s ago: executing program 58 (id=970): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) 14m34.468706566s ago: executing program 59 (id=1199): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x40001}, 0x881) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400"], 0x30}], 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[], 0x80}}], 0x1, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) read(r5, &(0x7f0000000640)=""/176, 0xb0) r6 = dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000040)={0x4, 0x8}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r8 = syz_open_pts(r0, 0x101840) dup3(r8, r0, 0x80000) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x8, 0x0, 0x9, 0x64, 0x4, "ca88ec6d0fd188f5"}) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 13m33.93275621s ago: executing program 60 (id=1320): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12m22.878074393s ago: executing program 61 (id=1429): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000003f000701feffffff00070000017c000010004280040008"], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0xc000) 11m28.7341012s ago: executing program 62 (id=1490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000000, &(0x7f00000001c0)=ANY=[]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000002c0)="10", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) gettid() bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000300)=@bloom_filter={0x1e, 0x100, 0x4, 0xfffffff9, 0x4600, 0xffffffffffffffff, 0x3dc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x6, 0x3}, 0x50) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050840) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x5393, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = fanotify_init(0x200, 0x0) r7 = dup(0xffffffffffffffff) fanotify_mark(r6, 0x1, 0x48001059, r7, 0x0) fsetxattr$security_ima(r5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04170f06596146a2136b"], 0xa, 0x3) 11m4.72060138s ago: executing program 63 (id=1530): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x2, 0x2) 8m53.204103542s ago: executing program 64 (id=1678): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m36.824520528s ago: executing program 65 (id=1703): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0xffffff29, 0x8000, 0x8, 0xc, "05525b125a783f299254b458e1a73eec87ab91"}) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) syz_usb_connect(0x6, 0x49a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) 5m6.468392544s ago: executing program 6 (id=2024): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 5m3.861225816s ago: executing program 3 (id=2026): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x20}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 5m3.075862231s ago: executing program 6 (id=2027): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) read$FUSE(r4, &(0x7f0000006e80)={0x2020}, 0x2020) 4m59.603768613s ago: executing program 3 (id=2029): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x10000011}) 4m56.06420449s ago: executing program 6 (id=2032): socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00602000000590000a2bc5603ca00000f7f89000000200000000101ff000000030909000000000000005e00000000000000", 0x48}], 0x1) 4m55.623877806s ago: executing program 3 (id=2034): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x62080, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 4m55.134933413s ago: executing program 6 (id=2036): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r2, 0x0, 0x0) unshare(0x22020400) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)) 4m54.460401672s ago: executing program 3 (id=2037): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 4m53.618454359s ago: executing program 6 (id=2039): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0x62302) socket$netlink(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 4m53.330252572s ago: executing program 66 (id=2021): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r3, r3, 0x0, 0x200000) 4m53.250475807s ago: executing program 3 (id=2041): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x10001}}, 0x30) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 4m45.040505728s ago: executing program 6 (id=2042): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) read$FUSE(r4, &(0x7f0000006e80)={0x2020}, 0x2020) 4m42.953633952s ago: executing program 3 (id=2043): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{0x6, 0x9, 0x27, 0x3}, {0x9, 0x86, 0x1, 0x3}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) socket$inet(0x2, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 4m29.460493306s ago: executing program 67 (id=2042): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) read$FUSE(r4, &(0x7f0000006e80)={0x2020}, 0x2020) 4m26.470280046s ago: executing program 68 (id=2043): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{0x6, 0x9, 0x27, 0x3}, {0x9, 0x86, 0x1, 0x3}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) socket$inet(0x2, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 3m15.689289957s ago: executing program 2 (id=2139): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) 3m10.964370368s ago: executing program 2 (id=2144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x9, "d3"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x40, 0x18, 0x2, "0666"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m8.255755001s ago: executing program 4 (id=2148): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x6) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)={0x3, 0x0, [{0x0, 0x80, &(0x7f0000000940)=""/128}, {0x1, 0x100d, &(0x7f0000002380)=""/4109}, {0xa000, 0x1000, &(0x7f00000033c0)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 3m7.813996463s ago: executing program 2 (id=2149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3m6.833033552s ago: executing program 2 (id=2151): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m6.055142145s ago: executing program 4 (id=2153): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m6.041143998s ago: executing program 2 (id=2154): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) getpriority(0x0, r1) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000007c0)={0x21f, 0x2, 0x0, {{0x500, 0xde, 0x0, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x1b, '\x04n\xd6\xcaev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x3, '\x00\x00\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21f) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x1ad72f7) accept4(r5, 0x0, 0x0, 0x80000) 2m55.676329283s ago: executing program 2 (id=2155): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000000, 0xb, 0x4, 0x0, 0x2}) 2m53.090484782s ago: executing program 4 (id=2159): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 2m50.298456535s ago: executing program 4 (id=2162): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x6) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)={0x3, 0x0, [{0x0, 0x80, &(0x7f0000000940)=""/128}, {0x1, 0x100d, &(0x7f0000002380)=""/4109}, {0xa000, 0x1000, &(0x7f00000033c0)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 2m48.318821692s ago: executing program 4 (id=2164): syz_usb_connect(0x5, 0x27, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120021000200000000000000a2cdd2003f78b2dcf0064997654477a3da7b75b394a36be66c84d679597cbbfdeab0ae179be3cae78e561d7bd0ae42fcfad08c9327af1c143d8ef934c4a449713b05770e5a61f9bd2d0e8463d61983b76ddaa677bd533bcd08249a3c1fa7e561801af0ab4eb11bd3693c24b846f0a46842f3d55c3e20819c93aae7f46c4810d626d8063a"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) clock_nanosleep(0xfffffdfc, 0x1000000, &(0x7f0000000100), 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000003c0)="b0ea6309e4", 0x5}], 0x2}}], 0x1, 0x84) bind$rxrpc(r1, &(0x7f0000001280)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) r3 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x0, 0x0) mq_notify(r3, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) socket(0x5, 0x5, 0x4) mq_notify(r3, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0x9) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000580)=[{0x6aa9, 0x810, 0x3f, &(0x7f0000000080)="b10c689f20e2231201b6db9ef8b13a31dde61a3fb67a372fa5d3c2ba6c51fcbc9727ee7c82d0e512106cc5d3587ec8310930e8063fe5e1dc296e22e481474d"}, {0x28, 0x2000, 0x4a, &(0x7f0000000100)="16d4177d12d7d4f161baee39485aa0161137fa49be07f9eba36e98558e5402175a92a2d9add7bd7afdfe29615fbcdd2587ea477688e45071b5123e8833039e8c314b5de3f63069fdf614"}, {0x7, 0x0, 0x75, &(0x7f0000000600)="bbed9d124b1c315ae708e379652c02dba30862b24564edbb4385f1bfb234a6a847a0e2b134f1e5b4a9596d25c027be975e79c4c5924f9d2e320e94cf2551d7f1acc53ff7bb7786a74f74b759817b39822b744e63f8d5cd8f98276afc9b70ce616b409a67163c66dd24b7a7dc3e8a47281d28919dc1"}, {0x4, 0x400, 0xe4, &(0x7f0000000480)="e60f03432e8c1c68454e427abf988e0db92370e39f8507a36a7d74b7ac0f8b69976d049726b374d9990650b37c2473ea4f07cfe462bd7751d5f20d27183da036de1ef5bfdae22cdd3950775d67403b4a3cfe7cbe28ad8406b54f9daefc35c1a5d7d582bd8f1e7a93f001d6f8182806290b88a5eaeb1dece9dbc9107a6494ff815ecac2126108f2ac72d938c5af2a227b805daf40cca13b1296eb08db775503a31d4c0306361e89f0266d827b1f45bdcefa0facdc78c3796648ffd56feac0e723c81467385dcbae69dc5bf05f63e89e66c58e6361d5951b9c536dfef60000000000000000"}], 0x4}) 2m46.503684123s ago: executing program 9 (id=2169): r0 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0xd, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25010000000c00020000000000000000001c0007800c0001800800", @ANYRES32=r4, @ANYBLOB="0c0001000800646c6b0e61", @ANYBLOB], 0x3c}}, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) rmdir(0x0) 2m43.966548081s ago: executing program 4 (id=2172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000019200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r10, 0x118, 0x0, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r9, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1, 0xfff}]}, 0x10) splice(r2, 0x0, r0, 0x0, 0x20000000000002, 0x2) 2m42.648495393s ago: executing program 9 (id=2173): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x6) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)={0x3, 0x0, [{0x0, 0x80, &(0x7f0000000940)=""/128}, {0x1, 0x100d, &(0x7f0000002380)=""/4109}, {0xa000, 0x1000, &(0x7f00000033c0)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 2m40.217656134s ago: executing program 69 (id=2155): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000000, 0xb, 0x4, 0x0, 0x2}) 2m38.308018252s ago: executing program 9 (id=2177): sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x1df6b78c, @mcast2, 0x43}, 0x1c, 0x0}}], 0x1, 0xff00) 2m37.087106154s ago: executing program 9 (id=2179): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 2m35.367001404s ago: executing program 9 (id=2182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, 0x0) 2m32.122883183s ago: executing program 9 (id=2184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r3, r3, 0x0, 0x200000) 2m27.876522303s ago: executing program 70 (id=2172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000019200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r10, 0x118, 0x0, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r9, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1, 0xfff}]}, 0x10) splice(r2, 0x0, r0, 0x0, 0x20000000000002, 0x2) 2m9.660938523s ago: executing program 71 (id=2184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r3, r3, 0x0, 0x200000) 1m12.040355159s ago: executing program 8 (id=2260): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "051000"}, @local=@item_012={0x1, 0x2, 0x9, "d3"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x40, 0x18, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m9.000054407s ago: executing program 8 (id=2267): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 1m5.781149778s ago: executing program 8 (id=2273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011000300686173683a69"], 0x60}}, 0x0) 1m4.490762611s ago: executing program 8 (id=2276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, 0x0, 0x0) 1m0.03862228s ago: executing program 8 (id=2281): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfefff038}, {0x6}]}, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='hybla', 0x65) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000001b00), 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r4, 0x1) 51.415043903s ago: executing program 8 (id=2284): setgroups(0xffffffffffffffb0, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 36.131264057s ago: executing program 72 (id=2284): setgroups(0xffffffffffffffb0, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 36.069348518s ago: executing program 1 (id=2302): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 30.420323962s ago: executing program 1 (id=2308): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6(0xa, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000004c40)=@base={0x1a, 0x3ff, 0x77cd12a, 0x2, 0x4000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 25.103305478s ago: executing program 1 (id=2317): syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x442, &(0x7f0000000a00)={[{@resuid}, {@nomblk_io_submit}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@inlinecrypt}]}, 0x3f, 0x540, &(0x7f0000000100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) socket$inet(0x2, 0x800, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x14, 0x1000, 0x1e2, 0x4, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, r4, 0x0, 0x3, 0x4}, 0x50) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0xc, 0x2a1, &(0x7f0000000500)="$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") creat(&(0x7f0000000240)='./file1\x00', 0x0) 21.445856598s ago: executing program 1 (id=2320): unshare(0x20060400) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) 20.294963974s ago: executing program 1 (id=2324): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 18.709266585s ago: executing program 1 (id=2328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 6.818670672s ago: executing program 0 (id=2350): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESOCT, @ANYBLOB=',uid=', @ANYRESHEX, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d31f57832035e96a151323e6f5a66fbca6bae94686c25de12000"/68], 0x81, 0x14f5, &(0x7f0000001580)="$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") r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0xfffffffd, 0x2, 0x0, 0x0, 0x100, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2010004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}], [], 0x6b}}) statx(0xffffffffffffff9c, &(0x7f0000008ec0)='./file0\x00', 0x1000, 0x2, 0x0) 5.763190364s ago: executing program 5 (id=2351): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.762942225s ago: executing program 7 (id=2352): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x8001, 0x3}}]}}, &(0x7f0000001f00)=""/4096, 0x4a, 0x1000, 0x3}, 0x28) 5.68092093s ago: executing program 0 (id=2353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x6, 0x30000, 0x0, r2, 0x1}) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) readv(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020600) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pread64(r4, 0x0, 0x0, 0x400000000002004b) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.88944342s ago: executing program 7 (id=2354): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca83"], 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) 4.615126344s ago: executing program 5 (id=2355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc0000001b00670100000000000000000000000000000020010000000000000000000000000000fe800000160000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000000000000000000000000000000000000000000ffffffffffffff7f00000000000000000700000000000000020000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0xcc}}, 0x0) 4.343325456s ago: executing program 0 (id=2356): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.852146212s ago: executing program 5 (id=2357): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r0, 0x0, 0x0, 0xd) 3.57442958s ago: executing program 7 (id=2358): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xfdef) 3.358350821s ago: executing program 73 (id=2328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0710670600000c00000017030000e433fe63bf050000000000001d360000000000006507f9ff01000000070700004c00d6cfcc75000000000000bf54000000000000070400000400f9ffad4301000000000095004000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad0300806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f60b24a26aba1276a3fa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b9ff129e609f4c787c6002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ee19b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a72faab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eaf04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06e55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4997f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228530c946a0008c9730abb6a9b3b3b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd09edc32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0adce515e2c9491b7773d5d542be0104d8ca9b92e0f86ce500af490acb9ce69b2f4f9a1345b8c977cfd325d2170c4b8243a8cb4a621d942b6890f5a724e97753f049ab5ba4bf31f4effcbf29e0bbacbbc7f3b572d081e9bf6ee48b8788d946d73e715864a58c7e353eaa1eb4e726f035c112af714d7e7ea088133d90afd430b665fea65e6454c95538a097ffc06bbf05cfbcd25a9508b9851ffccd3974d1553d86982635fdaaaae91981863a0d4b60e77bf68631cf0f9838cba2194bd8d73a319f8a5fdccf713e1c3456cb5555da785f89c6a828efa65f39a88fc3da2c738548c07975ccd7efe261e0b0f43bff0ea1103cc72b9d4ec8eda9c175010708cf7e4fe3bf5345be8c59099fdcfc9c642eca20537caba430ffbd3a619cffea600818714c7060a367c96e04c985f2e4ec5cc9c9187c0200ed6000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 3.240978098s ago: executing program 5 (id=2360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xc}) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000500)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "f9d4c6", 0x0, 0x2}) write$rfkill(r4, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x1, 0xff}, 0x8) 2.608911707s ago: executing program 0 (id=2361): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',nocompress,block=0x0000000000000200,gid=', @ANYRESHEX=0x0, @ANYBLOB=',check=relaxed,map=normal,iocharset=default,map=acorn,map=off,gid=', @ANYRESHEX=0x0, @ANYBLOB=',session=0x0000000000000027,dmode=0x0000000000000002,map=off,nocompress,dmode=0x7fffffffffffffff,\x00'], 0x2, 0xa28, &(0x7f0000000180)="$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") r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0) 2.315092871s ago: executing program 7 (id=2362): socket$tipc(0x1e, 0x5, 0x0) io_uring_setup(0x54a0, &(0x7f00000001c0)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0, 0x1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.378698487s ago: executing program 0 (id=2363): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000c40)) 1.306887295s ago: executing program 7 (id=2364): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@delqdisc={0xec, 0x25, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0x1}, {0x7, 0xfff1}, {0x1, 0xf}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x8, 0x2, 0x100, 0x0, 0x8, 0x4, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x85, 0x3, 0x1, 0x7, 0x1, 0x7, 0x3, 0xa}}, {0x18, 0x2, [0x7, 0x3ff, 0xeb, 0x8001, 0x7, 0x5, 0x3, 0x7ff, 0x7, 0xb]}}, {{0x1c, 0x1, {0x6, 0xb1, 0x6, 0x3, 0x0, 0x3, 0x92c4}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x0, 0x18c2, 0x3ff, 0x2, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x58, 0x4, 0x7, 0x101, 0x1, 0x81, 0x3, 0x1}}, {0x6, 0x2, [0xe0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0xec}, 0x1, 0x0, 0x0, 0x40080}, 0x884) 950.298269ms ago: executing program 5 (id=2365): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000002ac0)) 549.359492ms ago: executing program 0 (id=2366): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2070) 500.891054ms ago: executing program 7 (id=2367): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x1c0, 0x0, 0xffffffff, 0x268, 0xb8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff000000, 0xff, 'vlan1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3ad50d5c34f5042d, 0x58}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x4, @port=0x4e20}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0xffffffff, 'syzkaller0\x00', 'bridge0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast2, @broadcast, @port=0x4e22, @port=0x4e23}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x18}, @loopback, 0xffffffff, 0xffffffff, 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x3, 0x31}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @multicast2, @empty, @port=0x4e21, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @remote, @gre_key=0xe8, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 0s ago: executing program 5 (id=2368): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000700000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) kernel console output (not intermixed with test programs): .684249][T14420] bridge_slave_1: left allmulticast mode [ 1888.694042][T14420] bridge_slave_1: left promiscuous mode [ 1888.700932][T14420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.792798][T14420] bridge_slave_0: left allmulticast mode [ 1888.798956][T14420] bridge_slave_0: left promiscuous mode [ 1888.805759][T14420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.536779][T14420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.616647][T14420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.673668][T14420] bond0 (unregistering): Released all slaves [ 1889.776436][T16292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1889.783607][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1889.810438][T16292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1889.947047][T16315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1890.128846][T16315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.432993][T11400] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1891.717737][T11400] usb 5-1: Using ep0 maxpacket: 32 [ 1891.765808][T11400] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.777353][T11400] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1891.787076][T11400] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1891.798295][T11400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.825827][T16315] team0: Port device team_slave_0 added [ 1891.888189][T11400] usb 5-1: config 0 descriptor?? [ 1891.978526][T16292] hsr_slave_0: entered promiscuous mode [ 1891.990026][T16292] hsr_slave_1: entered promiscuous mode [ 1892.002278][T16292] debugfs: 'hsr0' already exists in 'hsr' [ 1892.009042][T16292] Cannot create hsr debugfs directory [ 1892.077489][T16315] team0: Port device team_slave_1 added [ 1892.186471][T14420] hsr_slave_0: left promiscuous mode [ 1892.201363][T14420] hsr_slave_1: left promiscuous mode [ 1892.212784][T14420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1892.220632][T14420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1892.256828][T14420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1892.267894][T14420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1892.319307][T14420] veth1_macvtap: left promiscuous mode [ 1892.325367][T14420] veth0_macvtap: left promiscuous mode [ 1892.332504][T14420] veth1_vlan: left promiscuous mode [ 1892.338343][T14420] veth0_vlan: left promiscuous mode [ 1893.138587][T14420] team0 (unregistering): Port device team_slave_1 removed [ 1893.177392][T14420] team0 (unregistering): Port device team_slave_0 removed [ 1893.768788][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1894.274194][ T8904] usb 5-1: USB disconnect, device number 18 [ 1894.445503][T16415] siw: device registration error -23 [ 1894.999839][T16315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1895.007451][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.034283][T16315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1895.226686][T16315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1895.234018][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.260521][T16315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1895.298458][T16256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.528363][T16256] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.585368][T13597] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1895.799639][T13597] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.811633][T13597] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1895.820571][T14420] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.825707][T13597] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1895.845099][T13597] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.866498][T13597] usb 10-1: config 0 descriptor?? [ 1895.887516][T13597] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1896.108524][ T3804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.116263][ T3804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1896.175783][T14420] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.244777][T16315] hsr_slave_0: entered promiscuous mode [ 1896.255732][T16315] hsr_slave_1: entered promiscuous mode [ 1896.265098][T16315] debugfs: 'hsr0' already exists in 'hsr' [ 1896.271049][T16315] Cannot create hsr debugfs directory [ 1896.381562][T13456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.389265][T13456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1896.558565][T14420] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.660947][T14420] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.640567][T16256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1897.652665][T16256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1897.689309][T14420] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.916776][T14420] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.046474][T14420] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.274321][T14420] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.555039][T16292] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1898.650199][T16292] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1898.707899][T11400] usb 10-1: USB disconnect, device number 38 [ 1898.885441][T16292] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1899.102571][T16292] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1899.174006][T14420] bridge_slave_1: left allmulticast mode [ 1899.179919][T14420] bridge_slave_1: left promiscuous mode [ 1899.188041][T14420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.353333][T14420] bridge_slave_0: left allmulticast mode [ 1899.359342][T14420] bridge_slave_0: left promiscuous mode [ 1899.366785][T14420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.479599][T14420] bridge_slave_1: left allmulticast mode [ 1899.486216][T14420] bridge_slave_1: left promiscuous mode [ 1899.494576][T14420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.599345][T14420] bridge_slave_0: left allmulticast mode [ 1899.605448][T14420] bridge_slave_0: left promiscuous mode [ 1899.612227][T14420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.539025][T14420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1900.591845][T14420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1900.660590][T14420] bond0 (unregistering): Released all slaves [ 1901.076128][T14420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1901.128597][T14420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1901.140573][T13597] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1901.167606][T14420] bond0 (unregistering): Released all slaves [ 1901.410580][T13597] usb 10-1: Using ep0 maxpacket: 32 [ 1901.494171][T13597] usb 10-1: config 0 has an invalid interface number: 230 but max is 0 [ 1901.503814][T13597] usb 10-1: config 0 has no interface number 0 [ 1901.511111][T13597] usb 10-1: config 0 interface 230 has no altsetting 0 [ 1901.674659][T16256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1901.685987][T13597] usb 10-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1901.695834][T13597] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.704259][T13597] usb 10-1: Product: syz [ 1901.708748][T13597] usb 10-1: Manufacturer: syz [ 1901.713897][T13597] usb 10-1: SerialNumber: syz [ 1901.867534][T13597] usb 10-1: config 0 descriptor?? [ 1901.923266][T13597] ums-usbat 10-1:0.230: USB Mass Storage device detected [ 1901.948321][T13597] ums-usbat 10-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1902.089080][T16315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1902.288329][T16315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1902.398166][T16315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1902.568341][T16315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1903.019473][T14420] hsr_slave_0: left promiscuous mode [ 1903.033828][T14420] hsr_slave_1: left promiscuous mode [ 1903.042166][T14420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1903.050771][T14420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1903.081812][T14420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1903.089707][T14420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1903.859928][T14420] hsr_slave_0: left promiscuous mode [ 1903.886270][T14420] hsr_slave_1: left promiscuous mode [ 1903.896215][T14420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1903.904094][T14420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1903.933580][T14420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1903.941760][T14420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1904.150217][T14420] veth1_macvtap: left promiscuous mode [ 1904.156218][T14420] veth0_macvtap: left promiscuous mode [ 1904.162665][T14420] veth1_vlan: left promiscuous mode [ 1904.168240][T14420] veth0_vlan: left promiscuous mode [ 1904.293496][T14420] veth1_macvtap: left promiscuous mode [ 1904.299452][T14420] veth0_macvtap: left promiscuous mode [ 1904.305382][T14420] veth1_vlan: left promiscuous mode [ 1904.311204][T14420] veth0_vlan: left promiscuous mode [ 1904.420550][T13597] ums-usbat 10-1:0.230: probe with driver ums-usbat failed with error -5 [ 1905.129299][T13597] usb 10-1: USB disconnect, device number 39 [ 1905.744885][T14420] team0 (unregistering): Port device team_slave_1 removed [ 1905.782664][T14420] team0 (unregistering): Port device team_slave_0 removed [ 1905.973516][T16493] binder: BINDER_SET_CONTEXT_MGR already set [ 1905.980144][T16493] binder: 16491:16493 ioctl 4018620d 200000000040 returned -16 [ 1906.602317][T14420] team0 (unregistering): Port device team_slave_1 removed [ 1906.672058][T14420] team0 (unregistering): Port device team_slave_0 removed [ 1906.727618][T13597] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1906.947812][T13597] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.958852][T13597] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1906.972514][T13597] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1906.982072][T13597] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.151527][T13597] usb 10-1: config 0 descriptor?? [ 1907.240892][T13597] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1907.269933][T16256] veth0_vlan: entered promiscuous mode [ 1907.288527][T16292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.452541][T16292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.575309][T16256] veth1_vlan: entered promiscuous mode [ 1907.668919][ T4148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.676566][ T4148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.990231][ T4148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.997927][ T4148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1908.235979][T16256] veth0_macvtap: entered promiscuous mode [ 1908.368833][T16256] veth1_macvtap: entered promiscuous mode [ 1908.429094][T16315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1908.701048][T16315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1908.720983][T16256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1908.834491][T14420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.842301][T14420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1908.870886][T16256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1908.955790][T14420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.963516][T14420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1909.030169][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.122978][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.145355][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.214702][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.946908][ T8904] usb 10-1: USB disconnect, device number 40 [ 1910.875644][T16516] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1911.101701][T16516] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.113923][T16516] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1911.124837][T16516] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1911.134688][T16516] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.160500][T16292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1911.352663][T16516] usb 10-1: config 0 descriptor?? [ 1911.464083][T16243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1911.476674][T16243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1911.491468][T16243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1911.515607][T16243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1911.528959][T16243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1911.676065][T16527] wlan0 speed is unknown, defaulting to 1000 [ 1912.154541][T16292] veth0_vlan: entered promiscuous mode [ 1912.161015][T16516] usbhid 10-1:0.0: can't add hid device: -71 [ 1912.169232][T16516] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1912.277959][T16315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1912.288740][T16516] usb 10-1: USB disconnect, device number 41 [ 1912.321602][T16292] veth1_vlan: entered promiscuous mode [ 1912.743866][T16292] veth0_macvtap: entered promiscuous mode [ 1912.935647][T16292] veth1_macvtap: entered promiscuous mode [ 1913.250557][T16292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1913.503869][T16292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1913.653857][T16243] Bluetooth: hci0: command tx timeout [ 1913.748666][T14420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.819619][T14420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.898064][T14420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.026471][T14420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.329399][T16527] chnl_net:caif_netlink_parms(): no params data found [ 1915.055024][T16546] binder: BINDER_SET_CONTEXT_MGR already set [ 1915.061233][T16546] binder: 16544:16546 ioctl 4018620d 200000000040 returned -16 [ 1915.719410][T16243] Bluetooth: hci0: command tx timeout [ 1916.219605][ T3695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.439171][ T3695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.601830][T16527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.611937][T16527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.621408][T16527] bridge_slave_0: entered allmulticast mode [ 1916.634640][T16527] bridge_slave_0: entered promiscuous mode [ 1916.697791][ T3695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.774733][T16527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.782316][T16527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.790373][T16527] bridge_slave_1: entered allmulticast mode [ 1916.800376][T16527] bridge_slave_1: entered promiscuous mode [ 1916.897775][ T3695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.240612][T16527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1917.364921][T16527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1917.427122][T16570] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2096'. [ 1917.440170][T16315] veth0_vlan: entered promiscuous mode [ 1917.726196][T16315] veth1_vlan: entered promiscuous mode [ 1917.775933][T16527] team0: Port device team_slave_0 added [ 1917.794646][T16243] Bluetooth: hci0: command tx timeout [ 1917.843715][T16527] team0: Port device team_slave_1 added [ 1917.983927][T16570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1918.075880][ T3695] bridge_slave_1: left allmulticast mode [ 1918.081806][ T3695] bridge_slave_1: left promiscuous mode [ 1918.090563][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.113515][ T3695] bridge_slave_0: left allmulticast mode [ 1918.119799][ T3695] bridge_slave_0: left promiscuous mode [ 1918.126614][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.012456][T13597] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1919.200122][T13597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1919.211814][T13597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1919.222272][T13597] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1919.232624][T13597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.333662][T13597] usb 5-1: config 0 descriptor?? [ 1919.400033][ T8674] block nbd0: Possible stuck request ffff888107bbc000: control (read@0,1024B). Runtime 390 seconds [ 1919.411343][ T8674] block nbd0: Possible stuck request ffff888107bbc180: control (read@1024,1024B). Runtime 390 seconds [ 1919.423047][ T8674] block nbd0: Possible stuck request ffff888107bbc300: control (read@2048,1024B). Runtime 390 seconds [ 1919.435126][ T8674] block nbd0: Possible stuck request ffff888107bbc480: control (read@3072,1024B). Runtime 390 seconds [ 1919.484050][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1919.515172][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1919.535900][ T3695] bond0 (unregistering): Released all slaves [ 1919.563639][T16527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1919.570824][T16527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1919.597420][T16527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1919.614784][T16577] siw: device registration error -23 [ 1919.738789][T16527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1919.746467][T16527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1919.773147][T16527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1919.900374][T16243] Bluetooth: hci0: command tx timeout [ 1920.138525][T16315] veth0_macvtap: entered promiscuous mode [ 1920.471973][T13597] usbhid 5-1:0.0: can't add hid device: -71 [ 1920.478774][T13597] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1920.582574][T13597] usb 5-1: USB disconnect, device number 19 [ 1920.628068][T16315] veth1_macvtap: entered promiscuous mode [ 1920.675229][T16527] hsr_slave_0: entered promiscuous mode [ 1920.685917][T16527] hsr_slave_1: entered promiscuous mode [ 1920.766653][ T3695] hsr_slave_0: left promiscuous mode [ 1920.789084][ T3695] hsr_slave_1: left promiscuous mode [ 1920.797892][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1920.806541][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1920.823123][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1920.830760][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1920.876958][ T3695] veth1_macvtap: left promiscuous mode [ 1920.883686][ T3695] veth0_macvtap: left promiscuous mode [ 1920.889633][ T3695] veth1_vlan: left promiscuous mode [ 1920.895472][ T3695] veth0_vlan: left promiscuous mode [ 1921.817738][ T3695] team0 (unregistering): Port device team_slave_1 removed [ 1921.854322][T16587] binder: 16586:16587 ioctl c0306201 0 returned -14 [ 1921.885592][ T3695] team0 (unregistering): Port device team_slave_0 removed [ 1922.471890][T16315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1922.716118][T16315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1922.851913][ T3883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.878086][T14420] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.948689][T14420] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.000434][T14420] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.420650][T16527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1924.562276][T16527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1924.672818][T16527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1924.785097][T16606] tipc: Enabling of bearer rejected, media not registered [ 1924.837292][T16527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1925.260485][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.269583][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.822183][ T3883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.830442][ T3883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.851373][ T8920] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1927.031002][T16626] binder: 16624:16626 ioctl c0306201 0 returned -14 [ 1927.070696][ T8920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.082306][ T8920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1927.093503][ T8920] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1927.103127][ T8920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.187544][T16527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1927.206719][ T8920] usb 10-1: config 0 descriptor?? [ 1927.500573][T16527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1927.656447][ T3804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.664164][ T3804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1927.732519][ T3804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.740209][ T3804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1927.953271][ T8920] usbhid 10-1:0.0: can't add hid device: -71 [ 1927.960222][ T8920] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1928.009845][ T8920] usb 10-1: USB disconnect, device number 42 [ 1928.411786][T16636] netlink: 'syz.4.2111': attribute type 12 has an invalid length. [ 1932.102149][T16662] xt_TCPMSS: Only works on TCP SYN packets [ 1932.915032][T16527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1933.196501][T16517] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1933.411178][T16517] usb 10-1: Using ep0 maxpacket: 32 [ 1933.454229][T16517] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1933.462925][T16517] usb 10-1: config 0 has no interface number 0 [ 1933.471150][T16517] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1933.572628][T16527] veth0_vlan: entered promiscuous mode [ 1933.691614][T16517] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1933.701425][T16517] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.710070][T16517] usb 10-1: Product: syz [ 1933.714538][T16517] usb 10-1: Manufacturer: syz [ 1933.719630][T16517] usb 10-1: SerialNumber: syz [ 1933.804477][T16527] veth1_vlan: entered promiscuous mode [ 1933.943615][T16517] usb 10-1: config 0 descriptor?? [ 1934.047417][T16673] siw: device registration error -23 [ 1934.644748][T16527] veth0_macvtap: entered promiscuous mode [ 1934.737791][T16527] veth1_macvtap: entered promiscuous mode [ 1935.030437][T16527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1935.096699][T16678] binder: 16677:16678 ioctl c0306201 0 returned -14 [ 1935.169016][T16527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1935.427027][ T3776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.494214][ T3776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.536709][ T3804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1935.545193][ T3804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1935.695056][ T3804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.747114][ T3804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.938402][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1935.948394][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1936.028445][ T8310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1936.281631][ T8310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1936.294597][ T8310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.305064][ T8310] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1936.314608][ T8310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.488098][T16517] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1936.496570][T16517] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1936.505114][T16517] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1936.513226][T16517] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1936.567385][ T8310] usb 3-1: config 0 descriptor?? [ 1936.686398][T16517] usb 10-1: USB disconnect, device number 43 [ 1937.195436][T16690] netlink: 'syz.4.2122': attribute type 12 has an invalid length. [ 1937.304902][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1937.330770][ T8310] usbhid 3-1:0.0: can't add hid device: -71 [ 1937.337821][ T8310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1937.381565][ T8310] usb 3-1: USB disconnect, device number 5 [ 1937.815984][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1937.826420][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1937.839728][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1937.857708][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1937.929823][T16294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1938.394333][T16695] wlan0 speed is unknown, defaulting to 1000 [ 1940.104784][T16294] Bluetooth: hci2: command tx timeout [ 1940.964589][T16695] chnl_net:caif_netlink_parms(): no params data found [ 1941.709834][ T8310] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1941.996457][ T8310] usb 10-1: Using ep0 maxpacket: 32 [ 1942.027402][ T8310] usb 10-1: config 0 has an invalid interface number: 142 but max is 0 [ 1942.036513][ T8310] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.049045][ T8310] usb 10-1: config 0 has no interface number 0 [ 1942.057312][ T8310] usb 10-1: config 0 interface 142 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1942.072197][ T8310] usb 10-1: config 0 interface 142 has no altsetting 0 [ 1942.189462][T16294] Bluetooth: hci2: command tx timeout [ 1942.207197][ T8310] usb 10-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=48.3b [ 1942.220132][ T8310] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.228725][ T8310] usb 10-1: Product: syz [ 1942.233651][ T8310] usb 10-1: Manufacturer: syz [ 1942.238551][ T8310] usb 10-1: SerialNumber: syz [ 1942.308455][ T3617] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.333430][T16740] netlink: 'syz.4.2132': attribute type 12 has an invalid length. [ 1942.416192][ T8310] usb 10-1: config 0 descriptor?? [ 1942.416205][T16517] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1942.523280][ T3617] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.599615][T16517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.611082][T16517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1942.621511][T16517] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1942.630933][T16517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.735272][ T3617] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.772370][ T8310] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.142/input/input12 [ 1942.789244][ T5148] bcm5974 10-1:0.142: could not read from device [ 1942.824411][T16517] usb 3-1: config 0 descriptor?? [ 1942.878579][ T5148] bcm5974 10-1:0.142: could not read from device [ 1942.992691][ T5148] bcm5974 10-1:0.142: could not read from device [ 1943.055783][ T8310] usb 10-1: USB disconnect, device number 44 [ 1943.077117][ T5148] bcm5974 10-1:0.142: could not read from device [ 1943.131426][ T3617] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.395701][T16695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.405476][T16695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.414010][T16695] bridge_slave_0: entered allmulticast mode [ 1943.426068][T16695] bridge_slave_0: entered promiscuous mode [ 1943.567292][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1943.588438][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1943.612011][T16517] usbhid 3-1:0.0: can't add hid device: -32 [ 1943.618779][T16517] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1943.768939][T16695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1943.776797][T16695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.785472][T16695] bridge_slave_1: entered allmulticast mode [ 1943.796888][T16695] bridge_slave_1: entered promiscuous mode [ 1943.811900][T16517] usb 3-1: USB disconnect, device number 6 [ 1944.110299][ T3617] bridge_slave_1: left allmulticast mode [ 1944.116471][ T3617] bridge_slave_1: left promiscuous mode [ 1944.123561][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.219248][ T3617] bridge_slave_0: left allmulticast mode [ 1944.225376][ T3617] bridge_slave_0: left promiscuous mode [ 1944.232675][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.288884][T16294] Bluetooth: hci2: command tx timeout [ 1946.347081][T16761] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1946.359223][T16294] Bluetooth: hci2: command tx timeout [ 1946.711966][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1946.825487][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1946.868465][ T3617] bond0 (unregistering): Released all slaves [ 1947.156383][T16695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1947.211114][T13456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1947.219175][T13456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.359319][T16769] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2137'. [ 1947.428429][T16695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1947.810540][ T8916] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1948.030215][ T8916] usb 3-1: device descriptor read/64, error -71 [ 1948.082159][T16769] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1948.137857][T16695] team0: Port device team_slave_0 added [ 1948.159996][ T4180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1948.168057][ T4180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1948.330268][ T3617] hsr_slave_0: left promiscuous mode [ 1948.362260][ T3617] hsr_slave_1: left promiscuous mode [ 1948.370898][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1948.378557][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1948.390230][ T8916] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1948.504620][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1948.512697][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1948.579825][ T8916] usb 3-1: device descriptor read/64, error -71 [ 1948.692354][ T3617] veth1_macvtap: left promiscuous mode [ 1948.698231][ T3617] veth0_macvtap: left promiscuous mode [ 1948.698812][ T8916] usb usb3-port1: attempt power cycle [ 1948.705474][ T3617] veth1_vlan: left promiscuous mode [ 1948.705734][ T3617] veth0_vlan: left promiscuous mode [ 1949.189874][ T8916] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1949.231781][ T8916] usb 3-1: device descriptor read/8, error -71 [ 1949.986662][T16787] netlink: 'syz.4.2142': attribute type 12 has an invalid length. [ 1950.086189][ T8674] block nbd0: Possible stuck request ffff888107bbc000: control (read@0,1024B). Runtime 420 seconds [ 1950.097471][ T8674] block nbd0: Possible stuck request ffff888107bbc180: control (read@1024,1024B). Runtime 420 seconds [ 1950.109027][ T8674] block nbd0: Possible stuck request ffff888107bbc300: control (read@2048,1024B). Runtime 420 seconds [ 1950.120457][ T8674] block nbd0: Possible stuck request ffff888107bbc480: control (read@3072,1024B). Runtime 420 seconds [ 1950.189240][ T8916] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1950.269548][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 1950.737687][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 1951.339061][ T8916] usb 3-1: device descriptor read/8, error -71 [ 1951.461130][ T8916] usb usb3-port1: unable to enumerate USB device [ 1952.233073][ T8916] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1952.265483][T16695] team0: Port device team_slave_1 added [ 1952.712957][ T8916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1952.733619][ T8916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1952.744260][ T8916] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1952.753774][ T8916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.796063][T16695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1952.805808][T16695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1952.836387][ T8916] usb 3-1: config 0 descriptor?? [ 1952.842860][T16695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1953.065077][T16695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1953.072491][T16695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1953.099034][T16695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1953.684081][ T8916] usbhid 3-1:0.0: can't add hid device: -71 [ 1953.690974][ T8916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1953.739793][ T8916] usb 3-1: USB disconnect, device number 11 [ 1953.850415][ T8920] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 1953.944732][T16804] binder: BINDER_SET_CONTEXT_MGR already set [ 1953.954702][T16804] binder: 16803:16804 ioctl 4018620d 200000004a80 returned -16 [ 1953.983246][T16695] hsr_slave_0: entered promiscuous mode [ 1953.993993][T16695] hsr_slave_1: entered promiscuous mode [ 1954.003367][T16695] debugfs: 'hsr0' already exists in 'hsr' [ 1954.009681][T16695] Cannot create hsr debugfs directory [ 1954.091224][ T8920] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1954.099940][ T8920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.110543][ T8920] usb 1-1: config 0 has no interface number 0 [ 1954.117159][ T8920] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1954.131614][ T8920] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1954.141474][ T8920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.230351][ T8920] usb 1-1: config 0 descriptor?? [ 1954.336433][ T8920] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1954.555914][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1954.556004][ T30] audit: type=1326 audit(1765045029.550:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeeb58f749 code=0x7ffc0000 [ 1954.711143][ T30] audit: type=1326 audit(1765045029.620:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeeb58f749 code=0x7ffc0000 [ 1954.734890][ T30] audit: type=1326 audit(1765045029.620:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeeb58f749 code=0x7ffc0000 [ 1954.758827][ T30] audit: type=1326 audit(1765045029.620:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeeb58f749 code=0x7ffc0000 [ 1954.782000][ T30] audit: type=1326 audit(1765045029.620:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feeeb58f749 code=0x7ffc0000 [ 1954.808235][ T30] audit: type=1326 audit(1765045029.620:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feeeb58f783 code=0x7ffc0000 [ 1954.832388][ T30] audit: type=1326 audit(1765045029.620:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feeeb58f783 code=0x7ffc0000 [ 1954.855977][ T30] audit: type=1326 audit(1765045029.690:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeeb58f749 code=0x7ffc0000 [ 1954.857729][ T8920] usb 1-1: USB disconnect, device number 11 [ 1954.882772][ T30] audit: type=1326 audit(1765045029.690:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feeeb58f783 code=0x7ffc0000 [ 1954.908737][ T30] audit: type=1326 audit(1765045029.700:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feeeb58f807 code=0x7ffc0000 [ 1955.170302][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1955.935345][ T8920] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1956.175163][T16695] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1956.247993][ T8920] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1956.260439][ T8920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1956.272315][ T8920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1956.284899][ T8920] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1956.298831][ T8920] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1956.308507][ T8920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.468450][T16695] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1956.509357][ T8310] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1956.521824][ T8920] usb 10-1: config 0 descriptor?? [ 1956.535461][T16820] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1956.604521][T16695] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1956.780430][ T8310] usb 1-1: device descriptor read/64, error -71 [ 1956.793425][T16695] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1966.754166][ T8920] usbhid 10-1:0.0: can't add hid device: -32 [ 1966.760909][ T8920] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1966.856605][ T8310] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1967.042238][ T8310] usb 1-1: device descriptor read/64, error -71 [ 1967.165808][ T8310] usb usb1-port1: attempt power cycle [ 1967.334788][ T8916] usb 10-1: USB disconnect, device number 45 [ 1968.077995][T16695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1968.330731][T16695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1968.644454][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.652188][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1968.670191][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.677896][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1969.779538][ T8310] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1969.908273][T16695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1969.923554][T16695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1970.109798][ T8310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1970.124896][ T8310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1970.136265][ T8310] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1970.145856][ T8310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.552105][ T8310] usb 1-1: config 0 descriptor?? [ 1971.214064][T16853] binder: BINDER_SET_CONTEXT_MGR already set [ 1971.220720][T16853] binder: 16852:16853 ioctl 4018620d 200000004a80 returned -16 [ 1971.481262][ T8310] usbhid 1-1:0.0: can't add hid device: -71 [ 1971.487993][ T8310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1971.601356][ T8310] usb 1-1: USB disconnect, device number 15 [ 1971.618460][T16858] binder: BINDER_SET_CONTEXT_MGR already set [ 1971.624883][T16858] binder: 16856:16858 ioctl 4018620d 200000000040 returned -16 [ 1972.350138][ T8310] usb 10-1: new low-speed USB device number 46 using dummy_hcd [ 1972.597383][ T8310] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1972.606014][ T8310] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1972.616740][ T8310] usb 10-1: config 0 has no interface number 0 [ 1972.623396][ T8310] usb 10-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1972.637489][ T8310] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1972.647143][ T8310] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.895895][ T8310] usb 10-1: config 0 descriptor?? [ 1972.968563][ T8310] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 1973.332844][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1973.332929][ T30] audit: type=1326 audit(1765045048.348:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69d98f749 code=0x7ffc0000 [ 1973.524442][T16695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1973.665754][ T30] audit: type=1326 audit(1765045048.388:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69d98f749 code=0x7ffc0000 [ 1973.689594][ T30] audit: type=1326 audit(1765045048.398:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69d98f749 code=0x7ffc0000 [ 1973.716504][ T30] audit: type=1326 audit(1765045048.398:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69d98f749 code=0x7ffc0000 [ 1973.741164][ T30] audit: type=1326 audit(1765045048.408:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd69d98f749 code=0x7ffc0000 [ 1973.764072][ T30] audit: type=1326 audit(1765045048.408:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69d98f749 code=0x7ffc0000 [ 1973.787818][ T30] audit: type=1326 audit(1765045048.408:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd69d98f783 code=0x7ffc0000 [ 1973.810957][ T30] audit: type=1326 audit(1765045048.418:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd69d98f783 code=0x7ffc0000 [ 1973.833837][ T30] audit: type=1326 audit(1765045048.458:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69d98f749 code=0x7ffc0000 [ 1973.856701][ T30] audit: type=1326 audit(1765045048.468:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.9.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69d98f749 code=0x7ffc0000 [ 1974.040032][ T8310] usb 10-1: USB disconnect, device number 46 [ 1974.512604][T16876] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2165'. [ 1974.828646][ T8920] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1975.047922][ T8920] usb 5-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 1975.058041][ T8920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.069239][ T8920] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 1975.213336][ T8920] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1975.223936][ T8920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.233155][ T8920] usb 5-1: Product: syz [ 1975.237580][ T8920] usb 5-1: Manufacturer: syz [ 1975.242543][ T8920] usb 5-1: SerialNumber: syz [ 1975.353928][ T8920] usb 5-1: config 0 descriptor?? [ 1976.510814][ T8920] usb 5-1: USB disconnect, device number 20 [ 1978.608104][T16695] veth0_vlan: entered promiscuous mode [ 1978.756551][T16695] veth1_vlan: entered promiscuous mode [ 1980.563484][ T8674] block nbd0: Possible stuck request ffff888107bbc000: control (read@0,1024B). Runtime 450 seconds [ 1980.574772][ T8674] block nbd0: Possible stuck request ffff888107bbc180: control (read@1024,1024B). Runtime 450 seconds [ 1980.586286][ T8674] block nbd0: Possible stuck request ffff888107bbc300: control (read@2048,1024B). Runtime 450 seconds [ 1980.597692][ T8674] block nbd0: Possible stuck request ffff888107bbc480: control (read@3072,1024B). Runtime 450 seconds [ 1980.732506][T16695] veth0_macvtap: entered promiscuous mode [ 1981.229996][T16695] veth1_macvtap: entered promiscuous mode [ 1981.657158][T16695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1981.831211][T16695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1982.053908][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1982.110046][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1982.170801][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1982.313665][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1983.233343][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 1984.199094][T16243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1984.209139][T16243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1984.219672][T16243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1984.354248][T16243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1984.378714][T16243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1984.522317][T16940] wlan0 speed is unknown, defaulting to 1000 [ 1985.800169][T16940] chnl_net:caif_netlink_parms(): no params data found [ 1986.494102][T16243] Bluetooth: hci4: command tx timeout [ 1988.563216][T16243] Bluetooth: hci4: command tx timeout [ 1990.060407][T16940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.068194][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.076296][T16940] bridge_slave_0: entered allmulticast mode [ 1990.086419][T16940] bridge_slave_0: entered promiscuous mode [ 1990.100739][ T8916] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1990.204851][T16940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.212670][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1990.220524][T16940] bridge_slave_1: entered allmulticast mode [ 1990.230633][T16940] bridge_slave_1: entered promiscuous mode [ 1990.362964][ T8916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.374646][ T8916] usb 1-1: config 0 has no interfaces? [ 1990.480676][ T8916] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1990.490238][ T8916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1990.499052][ T8916] usb 1-1: Product: syz [ 1990.503712][ T8916] usb 1-1: Manufacturer: syz [ 1990.508542][ T8916] usb 1-1: SerialNumber: syz [ 1990.627305][ T8916] usb 1-1: config 0 descriptor?? [ 1990.653310][T16243] Bluetooth: hci4: command tx timeout [ 1990.818051][T16940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1991.012158][T16940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1991.115180][T16911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1991.730454][T16911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1992.069571][T16911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1992.137714][T16940] team0: Port device team_slave_0 added [ 1992.267279][T16911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1992.367440][T16940] team0: Port device team_slave_1 added [ 1992.721777][T16243] Bluetooth: hci4: command tx timeout [ 1992.788901][T16940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1992.796560][T16940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1992.823692][T16940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1993.039420][T16940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1993.047979][T16940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1993.074415][T16940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1993.089276][T16911] bridge_slave_1: left allmulticast mode [ 1993.095701][T16911] bridge_slave_1: left promiscuous mode [ 1993.102844][T16911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.185866][T16911] bridge_slave_0: left allmulticast mode [ 1993.192037][T16911] bridge_slave_0: left promiscuous mode [ 1993.198551][T16911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.692107][T16517] usb 1-1: USB disconnect, device number 16 [ 1993.866770][T16911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1993.966147][T16911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1993.998202][T16911] bond0 (unregistering): Released all slaves [ 1994.647944][T16940] hsr_slave_0: entered promiscuous mode [ 1994.658374][T16940] hsr_slave_1: entered promiscuous mode [ 1994.668495][T16940] debugfs: 'hsr0' already exists in 'hsr' [ 1994.674613][T16940] Cannot create hsr debugfs directory [ 1995.360654][T16911] hsr_slave_0: left promiscuous mode [ 1995.433663][T16911] hsr_slave_1: left promiscuous mode [ 1995.445227][T16911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1995.453314][T16911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1995.581673][T16911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1995.590369][T16911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1995.683517][T16911] veth1_macvtap: left promiscuous mode [ 1995.690705][T16911] veth0_macvtap: left promiscuous mode [ 1995.696501][T16911] veth1_vlan: left promiscuous mode [ 1995.702280][T16911] veth0_vlan: left promiscuous mode [ 1996.185455][T16294] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1996.211826][T16294] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1996.322125][T16294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1996.451116][T16294] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1996.475231][T16294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1996.862257][T16911] team0 (unregistering): Port device team_slave_1 removed [ 1996.951286][T16911] team0 (unregistering): Port device team_slave_0 removed [ 1997.336392][T17011] wlan0 speed is unknown, defaulting to 1000 [ 1998.719532][T16294] Bluetooth: hci5: command tx timeout [ 1998.812046][T16294] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1998.831408][T16294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1998.842134][T16294] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1998.919985][T16294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1999.000313][T16294] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1999.560837][T17022] wlan0 speed is unknown, defaulting to 1000 [ 2000.309179][T17011] chnl_net:caif_netlink_parms(): no params data found [ 2000.835684][T16294] Bluetooth: hci5: command tx timeout [ 2000.881744][T17033] binder: 17032:17033 ioctl c0306201 200000000080 returned -14 [ 2001.038132][T16294] Bluetooth: hci6: command tx timeout [ 2001.093694][T16940] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2001.259634][T16940] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2001.369899][T16940] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2001.506839][T16940] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2002.877332][T16294] Bluetooth: hci5: command tx timeout [ 2002.976442][T17022] chnl_net:caif_netlink_parms(): no params data found [ 2003.122078][T16294] Bluetooth: hci6: command tx timeout [ 2003.996910][T17011] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.004487][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.012562][T17011] bridge_slave_0: entered allmulticast mode [ 2004.023141][T17011] bridge_slave_0: entered promiscuous mode [ 2004.349129][T17011] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.356800][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.364628][T17011] bridge_slave_1: entered allmulticast mode [ 2004.375302][T17011] bridge_slave_1: entered promiscuous mode [ 2012.267709][ T8674] block nbd0: Possible stuck request ffff888107bbc000: control (read@0,1024B). Runtime 480 seconds [ 2012.280009][ T8674] block nbd0: Possible stuck request ffff888107bbc180: control (read@1024,1024B). Runtime 480 seconds [ 2012.291761][ T8674] block nbd0: Possible stuck request ffff888107bbc300: control (read@2048,1024B). Runtime 480 seconds [ 2012.303213][ T8674] block nbd0: Possible stuck request ffff888107bbc480: control (read@3072,1024B). Runtime 480 seconds [ 2012.314871][T16294] Bluetooth: hci5: command tx timeout [ 2012.320615][T16294] Bluetooth: hci6: command tx timeout [ 2012.448481][T16940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2012.707976][ T7905] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.957004][T17011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2013.004455][ T7905] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.154210][T17011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2013.228818][ T7905] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.538719][ T7905] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.633092][T16940] 8021q: adding VLAN 0 to HW filter on device team0 [ 2014.034801][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.041182][T16294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2014.042679][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2014.074786][T17011] team0: Port device team_slave_0 added [ 2014.126065][T16294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2014.153373][T16294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2014.170147][T16294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2014.185882][T16294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2014.384073][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.391663][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.403249][T16294] Bluetooth: hci6: command tx timeout [ 2014.411249][T17022] bridge_slave_0: entered allmulticast mode [ 2014.423491][T17022] bridge_slave_0: entered promiscuous mode [ 2014.453314][T17011] team0: Port device team_slave_1 added [ 2014.653142][T17022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.660736][T17022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.669086][T17022] bridge_slave_1: entered allmulticast mode [ 2014.679443][T17022] bridge_slave_1: entered promiscuous mode [ 2014.807835][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.815307][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2014.849335][T17011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2014.860909][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2014.887880][T17011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2015.030039][ T7905] bridge_slave_1: left allmulticast mode [ 2015.037837][ T7905] bridge_slave_1: left promiscuous mode [ 2015.044698][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.143287][ T7905] bridge_slave_0: left allmulticast mode [ 2015.149263][ T7905] bridge_slave_0: left promiscuous mode [ 2015.156113][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.713744][ T7905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2015.773778][ T7905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2015.828404][ T7905] bond0 (unregistering): Released all slaves [ 2016.073905][T17011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2016.083165][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2016.112612][T17011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2016.261985][T17060] wlan0 speed is unknown, defaulting to 1000 [ 2016.312317][T16294] Bluetooth: hci2: command tx timeout [ 2016.364008][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2016.504414][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2016.615832][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2016.807314][ T8916] wlan0 speed is unknown, defaulting to 1000 [ 2016.813799][ T8916] infiniband syz1: ib_query_port failed (-19) [ 2016.945767][T17022] team0: Port device team_slave_0 added [ 2017.216422][ T7905] hsr_slave_0: left promiscuous mode [ 2017.265104][ T7905] hsr_slave_1: left promiscuous mode [ 2017.273652][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2017.281467][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2017.334970][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2017.342766][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2017.412705][ T7905] veth1_macvtap: left promiscuous mode [ 2017.418584][ T7905] veth0_macvtap: left promiscuous mode [ 2017.426059][ T7905] veth1_vlan: left promiscuous mode [ 2017.432060][ T7905] veth0_vlan: left promiscuous mode [ 2018.388796][ T7905] team0 (unregistering): Port device team_slave_1 removed [ 2018.507496][T16294] Bluetooth: hci2: command tx timeout [ 2018.518160][ T7905] team0 (unregistering): Port device team_slave_0 removed [ 2018.851248][T17022] team0: Port device team_slave_1 added [ 2018.933760][T17011] hsr_slave_0: entered promiscuous mode [ 2018.944587][T17011] hsr_slave_1: entered promiscuous mode [ 2018.953744][T17011] debugfs: 'hsr0' already exists in 'hsr' [ 2018.959694][T17011] Cannot create hsr debugfs directory [ 2019.130137][T16985] syz_tun (unregistering): left allmulticast mode [ 2019.337322][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2019.344636][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.373476][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2019.721199][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2019.728506][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.755137][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.917120][ T7905] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.134197][ T7905] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.561122][T16294] Bluetooth: hci2: command tx timeout [ 2021.292468][ T7905] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.440283][ T7905] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2022.466531][T17060] chnl_net:caif_netlink_parms(): no params data found [ 2022.519237][T17022] hsr_slave_0: entered promiscuous mode [ 2022.533101][T17022] hsr_slave_1: entered promiscuous mode [ 2022.542453][T17022] debugfs: 'hsr0' already exists in 'hsr' [ 2022.548395][T17022] Cannot create hsr debugfs directory [ 2022.652602][T16294] Bluetooth: hci2: command tx timeout [ 2023.169636][T13597] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2023.398429][T13597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2023.408969][T13597] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2023.423631][T13597] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2023.433244][T13597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.455154][T13597] usb 1-1: config 0 descriptor?? [ 2023.480141][T13597] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2023.605674][ T7905] bridge_slave_1: left allmulticast mode [ 2023.613338][ T7905] bridge_slave_1: left promiscuous mode [ 2023.620482][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.637848][ T7905] bridge_slave_0: left allmulticast mode [ 2023.644369][ T7905] bridge_slave_0: left promiscuous mode [ 2023.651304][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.172739][ T7905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2024.193214][ T7905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2024.221153][ T7905] bond0 (unregistering): Released all slaves [ 2024.570380][T16940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2025.188474][ T7905] hsr_slave_0: left promiscuous mode [ 2025.197992][ T7905] hsr_slave_1: left promiscuous mode [ 2025.208683][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2025.216299][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2025.245068][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2025.253105][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2025.319006][ T7905] veth1_macvtap: left promiscuous mode [ 2025.324881][ T7905] veth0_macvtap: left promiscuous mode [ 2025.331029][ T7905] veth1_vlan: left promiscuous mode [ 2025.336615][ T7905] veth0_vlan: left promiscuous mode [ 2025.993403][ T8920] usb 1-1: USB disconnect, device number 17 [ 2026.092835][ T7905] team0 (unregistering): Port device team_slave_1 removed [ 2026.156336][ T7905] team0 (unregistering): Port device team_slave_0 removed [ 2026.176414][T17127] binder: 17126:17127 ioctl c0306201 200000000080 returned -14 [ 2026.497727][T17060] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.505328][T17060] bridge0: port 1(bridge_slave_0) entered disabled state [ 2026.513308][T17060] bridge_slave_0: entered allmulticast mode [ 2026.526151][T17060] bridge_slave_0: entered promiscuous mode [ 2026.599037][T17011] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2026.859722][T17060] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.867714][T17060] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.875534][T17060] bridge_slave_1: entered allmulticast mode [ 2026.885549][T17060] bridge_slave_1: entered promiscuous mode [ 2026.909710][T17011] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2027.059779][T17011] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2027.247224][T17011] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2027.969466][T17060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2028.144378][T17060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2028.477511][T17060] team0: Port device team_slave_0 added [ 2028.628087][T17060] team0: Port device team_slave_1 added [ 2028.749292][T17022] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2029.955021][T17060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2029.962386][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2029.988957][T17060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2030.021383][T17022] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2030.048595][T17022] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2030.088955][T17060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2030.096488][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2030.124531][T17060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2030.165322][T17022] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2030.419754][T16940] veth0_vlan: entered promiscuous mode [ 2030.620370][T17060] hsr_slave_0: entered promiscuous mode [ 2030.631319][T17060] hsr_slave_1: entered promiscuous mode [ 2030.642837][T17060] debugfs: 'hsr0' already exists in 'hsr' [ 2030.648933][T17060] Cannot create hsr debugfs directory [ 2030.722674][T16940] veth1_vlan: entered promiscuous mode [ 2031.024809][T17011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2031.453887][T17011] 8021q: adding VLAN 0 to HW filter on device team0 [ 2031.485010][T16940] veth0_macvtap: entered promiscuous mode [ 2031.575458][T16716] bridge0: port 1(bridge_slave_0) entered blocking state [ 2031.583141][T16716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2031.669970][T16940] veth1_macvtap: entered promiscuous mode [ 2031.823451][T16716] bridge0: port 2(bridge_slave_1) entered blocking state [ 2031.831100][T16716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2032.120120][T16940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2032.239593][T17022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2032.316578][T16940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2032.532100][ T14] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.672805][ T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.767778][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.787437][T17022] 8021q: adding VLAN 0 to HW filter on device team0 [ 2032.814859][T16716] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.834716][T11400] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2033.076699][T11400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2033.088217][T11400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2033.098462][T11400] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2033.111864][T11400] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2033.121315][T11400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.221811][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.229606][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2033.372155][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.379945][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2033.381412][T11400] usb 1-1: config 0 descriptor?? [ 2033.490021][T17060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2033.658161][T17060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2033.749436][T17060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2033.843638][T17060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2033.919003][T11400] usbhid 1-1:0.0: can't add hid device: -71 [ 2033.931291][T11400] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2033.985309][T16243] Bluetooth: hci0: command 0x0406 tx timeout [ 2034.019669][T11400] usb 1-1: USB disconnect, device number 18 [ 2035.020575][T17011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2035.256019][T17200] binder: 17197:17200 ioctl c0306201 200000000080 returned -14 [ 2035.542807][T17060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2035.839885][T17060] 8021q: adding VLAN 0 to HW filter on device team0 [ 2036.461717][T17022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2036.593273][T16716] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.600931][T16716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2036.830961][T16716] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.838667][T16716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2038.958709][T17011] veth0_vlan: entered promiscuous mode [ 2039.017431][T17011] veth1_vlan: entered promiscuous mode [ 2039.366537][T17011] veth0_macvtap: entered promiscuous mode [ 2039.408877][T17060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2039.479952][T17011] veth1_macvtap: entered promiscuous mode [ 2039.735859][T17011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2039.859042][T17011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2040.000938][ T3695] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.003238][ T8916] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2040.042810][ T3695] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.106324][ T3695] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.169352][ T3695] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.189864][T17060] veth0_vlan: entered promiscuous mode [ 2040.209862][T17022] veth0_vlan: entered promiscuous mode [ 2040.284866][ T8916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.296381][ T8916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.307027][ T8916] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2040.316528][ T8916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.385399][T17022] veth1_vlan: entered promiscuous mode [ 2040.406638][T17060] veth1_vlan: entered promiscuous mode [ 2040.499537][ T8916] usb 1-1: config 0 descriptor?? [ 2040.835329][T17022] veth0_macvtap: entered promiscuous mode [ 2040.945268][T17060] veth0_macvtap: entered promiscuous mode [ 2040.989003][ T8916] hid_parser_main: 1 callbacks suppressed [ 2040.989116][ T8916] arvo 0003:1E7D:30D4.0022: unknown main item tag 0x0 [ 2041.011432][T17022] veth1_macvtap: entered promiscuous mode [ 2041.048785][T17060] veth1_macvtap: entered promiscuous mode [ 2041.114443][ T8916] arvo 0003:1E7D:30D4.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 2041.247443][ T8916] arvo 0003:1E7D:30D4.0022: couldn't init struct arvo_device [ 2041.255414][ T8916] arvo 0003:1E7D:30D4.0022: couldn't install keyboard [ 2041.309242][T17022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2041.338088][ T8916] arvo 0003:1E7D:30D4.0022: probe with driver arvo failed with error -32 [ 2041.379693][T17060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2041.451204][T17022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2041.461659][ T8916] usb 1-1: USB disconnect, device number 19 [ 2041.527595][T17060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2041.636851][ T3804] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.696027][ T3804] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.785335][ T3804] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.899090][ T3804] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.027978][ T3804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.115079][ T3804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.175246][ T3776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2042.185945][ T3776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2042.213879][ T3695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.362711][ T3695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.379081][T17259] fido_id[17259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2042.585619][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2042.593953][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2042.786832][ T8674] block nbd0: Possible stuck request ffff888107bbc000: control (read@0,1024B). Runtime 510 seconds [ 2042.799031][ T8674] block nbd0: Possible stuck request ffff888107bbc180: control (read@1024,1024B). Runtime 510 seconds [ 2042.810977][ T8674] block nbd0: Possible stuck request ffff888107bbc300: control (read@2048,1024B). Runtime 510 seconds [ 2042.822524][ T8674] block nbd0: Possible stuck request ffff888107bbc480: control (read@3072,1024B). Runtime 510 seconds [ 2042.842304][ T8310] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2043.083921][ T8310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.096512][ T8310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2043.110084][ T8310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2043.124839][ T8310] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2043.134412][ T8310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.290899][ T8310] usb 1-1: config 0 descriptor?? [ 2043.833548][ T8310] usbhid 1-1:0.0: can't add hid device: -71 [ 2043.840293][ T8310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2043.957042][ T8310] usb 1-1: USB disconnect, device number 20 [ 2044.956294][T16243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2044.974234][T16243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2044.993292][T16243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2045.017604][T16243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2045.056631][T16243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2045.160060][T17291] binder: 17288:17291 ioctl c0306201 200000000080 returned -14 [ 2045.174762][T17291] binder: 17288:17291 ioctl 4018620d 0 returned -22 [ 2047.103606][ T5818] Bluetooth: hci1: command tx timeout [ 2047.746648][T17287] chnl_net:caif_netlink_parms(): no params data found [ 2048.863804][ T4180] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.034616][ T4180] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.183672][ T5818] Bluetooth: hci1: command tx timeout [ 2049.239513][ T4180] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.348051][ T4180] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.769943][T17287] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.777578][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.785792][T17287] bridge_slave_0: entered allmulticast mode [ 2049.795803][T17287] bridge_slave_0: entered promiscuous mode [ 2049.992571][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.000293][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.008326][T17287] bridge_slave_1: entered allmulticast mode [ 2050.019299][T17287] bridge_slave_1: entered promiscuous mode [ 2050.214405][ T4180] bridge_slave_1: left allmulticast mode [ 2050.220890][ T4180] bridge_slave_1: left promiscuous mode [ 2050.227745][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.353354][ T4180] bridge_slave_0: left allmulticast mode [ 2050.359646][ T4180] bridge_slave_0: left promiscuous mode [ 2050.366459][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.960396][ T4180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2051.000436][ T4180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2051.034169][ T4180] bond0 (unregistering): Released all slaves [ 2051.252582][T17287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2051.263777][ T5818] Bluetooth: hci1: command tx timeout [ 2051.306841][T17287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2051.318921][ T3776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.327147][ T3776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2051.358790][ T8916] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2051.484274][T17287] team0: Port device team_slave_0 added [ 2051.535181][ T8916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2051.547014][ T8916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2051.558782][ T8916] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2051.572892][ T8916] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2051.583118][ T8916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.615688][T17287] team0: Port device team_slave_1 added [ 2051.672456][ T3804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.680746][ T3804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2051.702860][ T8916] usb 1-1: config 0 descriptor?? [ 2051.916140][T17287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2051.923728][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2051.951335][T17287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2051.973894][ T7967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.982283][ T7967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.061372][T17287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2052.068939][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2052.095529][T17287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2052.158204][ T8916] usbhid 1-1:0.0: can't add hid device: -71 [ 2052.165063][ T8916] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2052.205777][ T8916] usb 1-1: USB disconnect, device number 21 [ 2052.252412][ T4180] hsr_slave_0: left promiscuous mode [ 2052.270556][ T4180] hsr_slave_1: left promiscuous mode [ 2052.279936][ T4180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2052.287563][ T4180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2052.304133][ T4180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2052.311955][ T4180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2052.336701][ T4180] veth1_macvtap: left promiscuous mode [ 2052.343058][ T4180] veth0_macvtap: left promiscuous mode [ 2052.349261][ T4180] veth1_vlan: left promiscuous mode [ 2052.354820][ T4180] veth0_vlan: left promiscuous mode [ 2052.984239][ T4180] team0 (unregistering): Port device team_slave_1 removed [ 2053.014232][ T4180] team0 (unregistering): Port device team_slave_0 removed [ 2053.101274][T17347] binder: 17346:17347 ioctl c0306201 200000000080 returned -14 [ 2053.119246][T17347] binder: 17346:17347 ioctl 4018620d 0 returned -22 [ 2053.340564][ T5818] Bluetooth: hci1: command tx timeout [ 2053.438394][ T3695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.447585][ T3695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.780838][ T7967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.789127][ T7967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2054.236766][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2054.245102][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2054.315434][T17287] hsr_slave_0: entered promiscuous mode [ 2054.326213][T17287] hsr_slave_1: entered promiscuous mode [ 2054.335725][T17287] debugfs: 'hsr0' already exists in 'hsr' [ 2054.342064][T17287] Cannot create hsr debugfs directory [ 2055.447022][T11400] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2055.725998][T11400] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 2055.734868][T11400] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.745621][T11400] usb 6-1: config 0 has no interface number 0 [ 2055.752132][T11400] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2055.763563][T11400] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2055.773898][T11400] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2055.787534][T11400] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2055.799939][T11400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.864176][T11400] usb 6-1: config 0 descriptor?? [ 2055.956826][T11400] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2056.100445][T11400] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 2056.115631][T11400] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2056.124554][T11400] usb 6-1: MIDIStreaming interface descriptor not found [ 2056.571610][T11400] usb 6-1: USB disconnect, device number 9 [ 2056.709268][T14329] udevd[14329]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2056.954021][T16648] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2057.243476][T17371] binder: 17370:17371 ioctl c0306201 200000000080 returned -14 [ 2057.280286][T17371] binder: 17370:17371 ioctl 4018620d 0 returned -22 [ 2057.309956][T16648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2057.321515][T16648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2057.334340][T16648] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2057.348700][T16648] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2057.358198][T16648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.457965][T17287] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2057.476200][T16648] usb 1-1: config 0 descriptor?? [ 2057.803320][T17287] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2057.908127][T17287] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2058.053247][T17287] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2058.217347][T16648] usbhid 1-1:0.0: can't add hid device: -71 [ 2058.224169][T16648] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2058.332858][T16648] usb 1-1: USB disconnect, device number 22 [ 2058.974203][T17385] input: syz1 as /devices/virtual/input/input14 [ 2059.597347][T17287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2059.813182][T17287] 8021q: adding VLAN 0 to HW filter on device team0 [ 2059.887476][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 2059.895146][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2059.995852][ T8916] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2060.085441][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.093045][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2060.216839][ T8916] usb 9-1: Using ep0 maxpacket: 8 [ 2060.282451][ T8916] usb 9-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 2060.292112][ T8916] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2060.305095][ T8916] usb 9-1: Product: syz [ 2060.309509][ T8916] usb 9-1: Manufacturer: syz [ 2060.314303][ T8916] usb 9-1: SerialNumber: syz [ 2060.490757][ T8916] usb 9-1: config 0 descriptor?? [ 2060.788390][T16648] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2060.908778][T13597] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2060.999896][T16648] usb 6-1: Using ep0 maxpacket: 8 [ 2061.034106][T16648] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2061.043029][T16648] usb 6-1: config 179 has no interface number 0 [ 2061.050283][T16648] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2061.062029][T16648] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2061.074612][T16648] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2061.086730][T16648] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2061.098678][T16648] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2061.112598][T16648] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2061.122498][T16648] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2061.132900][T16648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.193541][T16648] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input15 [ 2061.245837][T13597] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 2061.254791][T13597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2061.265996][T13597] usb 1-1: config 0 has no interface number 0 [ 2061.272337][T13597] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2061.283937][T13597] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2061.290326][ T5148] input input15: unable to receive magic message: -110 [ 2061.294433][T13597] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2061.314918][T13597] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2061.327351][T13597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.372854][T17406] binder: 17404:17406 ioctl c0306201 200000000080 returned -14 [ 2061.385143][ T5148] input input15: unable to receive magic message: -32 [ 2061.390287][T17406] binder: BINDER_SET_CONTEXT_MGR already set [ 2061.399624][T17406] binder: 17404:17406 ioctl 4018620d 200000000040 returned -16 [ 2061.409381][T17406] binder: 17404:17406 ioctl c0306201 0 returned -14 [ 2061.521686][ T5148] input input15: unable to receive magic message: -71 [ 2061.525256][T13597] usb 1-1: config 0 descriptor?? [ 2061.617764][T16648] usb 6-1: USB disconnect, device number 10 [ 2061.624147][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2061.624403][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2061.767366][ T8916] usb 9-1: USB disconnect, device number 15 [ 2061.886967][T13597] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2061.946782][T13597] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 2062.002271][T13597] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2062.010917][T13597] usb 1-1: MIDIStreaming interface descriptor not found [ 2062.426044][T13597] usb 1-1: USB disconnect, device number 23 [ 2063.219968][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2240'. [ 2063.364983][T14323] udevd[14323]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2063.466039][T17287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2064.091671][T17437] binder: 17435:17437 ioctl c0306201 200000000080 returned -14 [ 2064.106864][T17437] binder: 17435:17437 ioctl c0306201 0 returned -14 [ 2065.055825][T14287] udevd[14287]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2065.821511][T13597] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2065.863736][T17461] netlink: 'syz.8.2252': attribute type 4 has an invalid length. [ 2066.068705][T13597] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 2066.077514][T13597] usb 2-1: config 0 has no interface number 0 [ 2066.084104][T13597] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2066.095676][T13597] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2066.106090][T13597] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2066.113568][T17461] netlink: 'syz.8.2252': attribute type 4 has an invalid length. [ 2066.119580][T13597] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2066.141018][T13597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.386038][T13597] usb 2-1: config 0 descriptor?? [ 2066.410718][T13597] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2066.660272][T13597] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 2066.672587][T13597] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2066.679842][T13597] usb 2-1: MIDIStreaming interface descriptor not found [ 2066.862730][ T8916] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2067.004040][T13597] usb 2-1: USB disconnect, device number 35 [ 2067.163354][ T8916] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2067.175454][ T8916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2067.186835][ T8916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2067.197068][ T8916] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2067.210615][ T8916] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2067.220059][ T8916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.377570][T17287] veth0_vlan: entered promiscuous mode [ 2067.517668][T17457] udevd[17457]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2067.529784][T17287] veth1_vlan: entered promiscuous mode [ 2067.534506][ T8916] usb 1-1: config 0 descriptor?? [ 2067.547773][ T8920] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2067.776797][ T8920] usb 9-1: Using ep0 maxpacket: 16 [ 2067.826462][ T8920] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2067.835953][ T8920] usb 9-1: config 1 has no interface number 1 [ 2067.842758][ T8920] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2067.853932][ T8920] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2067.867449][ T8920] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2068.147449][ T8916] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2068.176427][T17287] veth0_macvtap: entered promiscuous mode [ 2068.220111][ T8920] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2068.230212][ T8920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.238985][ T8920] usb 9-1: Product: syz [ 2068.243584][ T8920] usb 9-1: Manufacturer: syz [ 2068.248414][ T8920] usb 9-1: SerialNumber: syz [ 2068.330371][T17287] veth1_macvtap: entered promiscuous mode [ 2068.404160][T16629] usb 1-1: USB disconnect, device number 24 [ 2068.724878][T17287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2068.867368][T17287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2069.040443][ T4247] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.075098][ T8920] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2069.196892][ T4247] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.267042][ T4247] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.330717][T16911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.476668][ T8920] usb 9-1: USB disconnect, device number 16 [ 2069.488451][T13597] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2069.636997][T17474] fido_id[17474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2069.670449][T17481] binder: 17480:17481 ioctl c0306201 200000000080 returned -14 [ 2069.676422][T14323] udevd[14323]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2069.706735][T17481] binder: 17480:17481 ioctl c0306201 0 returned -14 [ 2069.833860][T13597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.844923][T13597] usb 2-1: config 0 has no interfaces? [ 2069.938293][T13597] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2069.948387][T13597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2069.957020][T13597] usb 2-1: Product: syz [ 2069.961714][T13597] usb 2-1: Manufacturer: syz [ 2069.966550][T13597] usb 2-1: SerialNumber: syz [ 2070.111972][T13597] usb 2-1: config 0 descriptor?? [ 2070.345944][T17488] loop5: detected capacity change from 0 to 256 [ 2071.036521][T11400] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2071.269973][T11400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.281510][T11400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.291817][T11400] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2071.301332][T11400] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.531354][T11400] usb 9-1: config 0 descriptor?? [ 2071.825370][T17502] loop0: detected capacity change from 0 to 2048 [ 2071.961225][T11400] arvo 0003:1E7D:30D4.0024: unknown main item tag 0x0 [ 2072.078385][T11400] arvo 0003:1E7D:30D4.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0 [ 2072.164612][T11400] arvo 0003:1E7D:30D4.0024: couldn't init struct arvo_device [ 2072.177067][T11400] arvo 0003:1E7D:30D4.0024: couldn't install keyboard [ 2072.268003][T11400] arvo 0003:1E7D:30D4.0024: probe with driver arvo failed with error -5 [ 2072.367885][ T8920] usb 9-1: USB disconnect, device number 17 [ 2072.873167][ T8674] block nbd0: Possible stuck request ffff888107bbc000: control (read@0,1024B). Runtime 540 seconds [ 2072.884494][ T8674] block nbd0: Possible stuck request ffff888107bbc180: control (read@1024,1024B). Runtime 540 seconds [ 2072.900457][ T8674] block nbd0: Possible stuck request ffff888107bbc300: control (read@2048,1024B). Runtime 540 seconds [ 2072.913361][ T8674] block nbd0: Possible stuck request ffff888107bbc480: control (read@3072,1024B). Runtime 540 seconds [ 2073.216359][T13597] usb 2-1: USB disconnect, device number 36 [ 2073.282108][T11400] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2073.304824][T17508] fido_id[17508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2073.518644][T11400] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 2073.527395][T11400] usb 1-1: config 0 has no interface number 0 [ 2073.534015][T11400] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2073.549202][T11400] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2073.560630][T11400] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2073.574409][T11400] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2073.583897][T11400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.898657][T11400] usb 1-1: config 0 descriptor?? [ 2074.005786][T11400] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2074.070163][T13597] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2074.240707][T11400] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 2074.252401][T11400] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2074.259925][T11400] usb 1-1: MIDIStreaming interface descriptor not found [ 2074.453158][T13597] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2074.465422][T13597] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2074.476839][T13597] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2074.487037][T13597] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2074.500751][T13597] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2074.510181][T13597] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.067686][T17531] binder: 17530:17531 ioctl c0306201 200000000080 returned -14 [ 2075.166877][T11400] usb 1-1: USB disconnect, device number 25 [ 2075.224672][T13597] usb 9-1: config 0 descriptor?? [ 2075.786550][T13597] usbhid 9-1:0.0: can't add hid device: -71 [ 2075.793543][T13597] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2075.855334][T17538] loop1: detected capacity change from 0 to 512 [ 2075.860981][T13597] usb 9-1: USB disconnect, device number 18 [ 2075.901239][T17539] loop0: detected capacity change from 0 to 512 [ 2076.052964][T17539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2076.070941][T17539] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2076.110344][T17538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2076.123634][T17538] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2076.360989][T17539] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #15: comm syz.0.2270: corrupted xattr block 33: invalid ea_ino [ 2076.467211][T14323] udevd[14323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2076.502058][T17539] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 2076.888636][T17060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2077.152572][T16527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2077.988709][T13597] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2078.001451][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2078.271079][T13597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2078.282065][T13597] usb 1-1: config 0 has no interfaces? [ 2078.392886][T13597] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2078.402621][T13597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2078.411258][T13597] usb 1-1: Product: syz [ 2078.418335][T13597] usb 1-1: Manufacturer: syz [ 2078.423156][T13597] usb 1-1: SerialNumber: syz [ 2078.560730][T13597] usb 1-1: config 0 descriptor?? [ 2081.511009][ T8916] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2081.820693][ T8916] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 2081.829299][ T8916] usb 6-1: config 0 has no interface number 0 [ 2081.835763][ T8916] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2081.847315][ T8916] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2081.857701][ T8916] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2081.871239][ T8916] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2081.880755][ T8916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.302197][T14420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.317938][T14420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.494679][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.503044][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.609246][ T8916] usb 6-1: config 0 descriptor?? [ 2082.744841][ T8916] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2082.811227][T13597] usb 1-1: USB disconnect, device number 26 [ 2082.911078][ T8916] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 2082.922529][ T8916] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2082.936712][ T8916] usb 6-1: MIDIStreaming interface descriptor not found [ 2091.282467][ T8916] usb 6-1: USB disconnect, device number 11 [ 2091.665908][T17598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2283'. [ 2091.943765][ T8920] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2092.117437][T14321] udevd[14321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2092.197693][ T8920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2092.213096][ T8920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2092.224611][ T8920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2092.240811][ T8920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2092.241054][ T8920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2092.241208][ T8920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.481322][ T8920] usb 1-1: config 0 descriptor?? [ 2092.971818][ T8920] usbhid 1-1:0.0: can't add hid device: -71 [ 2092.978603][ T8920] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2093.009281][ T8920] usb 1-1: USB disconnect, device number 27 [ 2093.342059][T17615] input: syz0 as /devices/virtual/input/input17 [ 2094.597085][ T8920] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2094.840934][ T8920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2094.853545][ T8920] usb 2-1: config 0 has no interfaces? [ 2094.955793][ T8920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2094.965476][ T8920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2094.974071][ T8920] usb 2-1: Product: syz [ 2094.978455][ T8920] usb 2-1: Manufacturer: syz [ 2094.983415][ T8920] usb 2-1: SerialNumber: syz [ 2103.239289][ T8674] block nbd0: Possible stuck request ffff888107bbc000: control (read@0,1024B). Runtime 570 seconds [ 2103.250390][ T8674] block nbd0: Possible stuck request ffff888107bbc180: control (read@1024,1024B). Runtime 570 seconds [ 2103.261922][ T8674] block nbd0: Possible stuck request ffff888107bbc300: control (read@2048,1024B). Runtime 570 seconds [ 2103.273248][ T8674] block nbd0: Possible stuck request ffff888107bbc480: control (read@3072,1024B). Runtime 570 seconds [ 2103.296821][ T8920] usb 2-1: config 0 descriptor?? [ 2104.104579][ T8920] usb 2-1: can't set config #0, error -71 [ 2104.210020][ T8920] usb 2-1: USB disconnect, device number 37 [ 2104.607468][T17640] loop1: detected capacity change from 0 to 512 [ 2104.689295][ T8920] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2104.783030][T17640] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2298: inode has both inline data and extents flags [ 2104.907254][T17640] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2298: couldn't read orphan inode 15 (err -117) [ 2104.958623][ T8920] usb 6-1: Using ep0 maxpacket: 16 [ 2104.977375][T17640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2105.091621][ T8920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2105.103130][ T8920] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2105.112601][ T8920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.231451][ T8920] usb 6-1: config 0 descriptor?? [ 2105.329155][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2105.329244][ T30] audit: type=1804 audit(1765045180.379:803): pid=17640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2298" name="/newroot/24/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 2105.360318][ T30] audit: type=1800 audit(1765045180.379:804): pid=17640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2298" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 2105.816105][ T8920] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2106.079380][ T8920] usb 6-1: USB disconnect, device number 12 [ 2106.234705][T17060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2107.261105][ T8920] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2107.583061][ T8920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2107.601759][ T8920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2107.615296][ T8920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2107.625487][ T8920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2107.639195][ T8920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2107.648792][ T8920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.976822][ T8920] usb 2-1: config 0 descriptor?? [ 2108.013589][T16243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2108.040927][T16243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2108.053631][T16243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2108.100373][T16243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2108.124047][T16243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2108.562578][ T8920] usbhid 2-1:0.0: can't add hid device: -71 [ 2108.571390][ T8920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2108.724583][ T8920] usb 2-1: USB disconnect, device number 38 [ 2110.196564][T16243] Bluetooth: hci3: command tx timeout [ 2112.238289][T17684] loop5: detected capacity change from 0 to 256 [ 2112.288348][T17684] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 256) [ 2112.320299][T16243] Bluetooth: hci3: command tx timeout [ 2113.056907][T17664] chnl_net:caif_netlink_parms(): no params data found [ 2113.456344][T11400] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2113.685287][T11400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.696113][T11400] usb 2-1: config 0 has no interfaces? [ 2113.776377][T11400] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2113.786197][T11400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2113.794548][T11400] usb 2-1: Product: syz [ 2113.799886][T11400] usb 2-1: Manufacturer: syz [ 2113.804713][T11400] usb 2-1: SerialNumber: syz [ 2113.917237][T11400] usb 2-1: config 0 descriptor?? [ 2114.355737][T16243] Bluetooth: hci3: command tx timeout [ 2115.466186][T11400] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2115.610324][T17664] bridge0: port 1(bridge_slave_0) entered blocking state [ 2115.620015][T17664] bridge0: port 1(bridge_slave_0) entered disabled state [ 2115.628261][T17664] bridge_slave_0: entered allmulticast mode [ 2115.641659][T17664] bridge_slave_0: entered promiscuous mode [ 2115.683590][T11400] usb 6-1: Using ep0 maxpacket: 16 [ 2115.746516][T11400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2115.758343][T11400] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2115.767986][T11400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.805467][T11400] usb 6-1: config 0 descriptor?? [ 2115.817664][T17664] bridge0: port 2(bridge_slave_1) entered blocking state [ 2115.825425][T17664] bridge0: port 2(bridge_slave_1) entered disabled state [ 2115.833342][T17664] bridge_slave_1: entered allmulticast mode [ 2115.992268][T17664] bridge_slave_1: entered promiscuous mode [ 2116.331359][T11400] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2116.435377][T16243] Bluetooth: hci3: command tx timeout [ 2116.549938][T11400] usb 6-1: USB disconnect, device number 13 [ 2116.642277][T17664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2116.741814][ T8916] usb 2-1: USB disconnect, device number 39 [ 2116.789108][T17664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2117.454442][T17664] team0: Port device team_slave_0 added [ 2117.549255][T17664] team0: Port device team_slave_1 added [ 2117.927335][T17726] loop1: detected capacity change from 0 to 512 [ 2117.951221][T17664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2117.958543][T17664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2117.985060][T17664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2118.053313][T17726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2118.061487][T17726] EXT4-fs: inline encryption not supported [ 2118.168081][T17726] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 2118.206965][T17664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2118.214249][T17664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2118.247790][T17664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2118.291016][T17732] loop5: detected capacity change from 0 to 512 [ 2118.406720][T17732] EXT4-fs (loop5): unsupported inode size: 5 [ 2118.412962][T17732] EXT4-fs (loop5): blocksize: 4096 [ 2118.505530][ T4331] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.297530][T17738] loop1: detected capacity change from 0 to 256 [ 2119.307329][T17738] vfat: Bad value for 'fmask' [ 2120.513827][ T4331] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.280201][ T4331] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.768299][ T4331] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2122.157287][ T4282] Bluetooth: hci4: Frame reassembly failed (-84) [ 2122.206439][T17664] hsr_slave_0: entered promiscuous mode [ 2122.217324][T17664] hsr_slave_1: entered promiscuous mode [ 2122.226749][T17664] debugfs: 'hsr0' already exists in 'hsr' [ 2122.242997][T17664] Cannot create hsr debugfs directory [ 2122.304719][T17748] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2122.654451][T17754] loop1: detected capacity change from 0 to 512 [ 2122.732424][ T4331] bridge_slave_1: left allmulticast mode [ 2122.738445][ T4331] bridge_slave_1: left promiscuous mode [ 2122.755777][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.809604][T17754] EXT4-fs: Ignoring removed oldalloc option [ 2122.821480][ T4331] bridge_slave_0: left allmulticast mode [ 2122.827963][ T4331] bridge_slave_0: left promiscuous mode [ 2122.834829][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 2122.927062][T17754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2123.329135][T17754] EXT4-fs (loop1): shut down requested (1) [ 2123.704535][T17765] loop5: detected capacity change from 0 to 128 [ 2123.752313][T11400] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2123.810161][T17060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2123.948982][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2123.952661][T11400] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.971005][T11400] usb 8-1: config 0 has no interfaces? [ 2124.035691][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2124.087280][T11400] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2124.095066][ T4331] bond0 (unregistering): Released all slaves [ 2124.096863][T11400] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2124.111105][T11400] usb 8-1: Product: syz [ 2124.118665][T11400] usb 8-1: Manufacturer: syz [ 2124.124132][T11400] usb 8-1: SerialNumber: syz [ 2124.192075][T16294] Bluetooth: hci4: command 0x1003 tx timeout [ 2124.206784][T16243] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2124.253850][T11400] usb 8-1: config 0 descriptor?? [ 2125.827047][ T4331] hsr_slave_0: left promiscuous mode [ 2125.864709][ T4331] hsr_slave_1: left promiscuous mode [ 2125.873839][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2125.881638][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2125.929002][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2125.937190][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2126.085792][ T4331] veth1_macvtap: left promiscuous mode [ 2126.093770][ T4331] veth0_macvtap: left promiscuous mode [ 2126.099782][ T4331] veth1_vlan: left promiscuous mode [ 2126.105712][ T4331] veth0_vlan: left promiscuous mode [ 2126.113590][T16243] Bluetooth: hci6: command 0x0406 tx timeout [ 2127.046760][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 2127.242508][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 2127.497188][ T8920] usb 8-1: USB disconnect, device number 29 [ 2128.009507][T17788] batadv_slave_0: entered promiscuous mode [ 2128.068071][T17792] batadv_slave_0: left promiscuous mode [ 2128.311969][T17798] loop5: detected capacity change from 0 to 512 [ 2128.498979][T17798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2128.513166][T17798] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2129.256330][T17022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2129.717736][T17813] loop0: detected capacity change from 0 to 1024 [ 2130.085422][T17664] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2130.896834][T17664] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2130.937233][T17664] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2131.940554][T17664] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2133.651660][ T8674] block nbd0: Possible stuck request ffff888107bbc000: control (read@0,1024B). Runtime 600 seconds [ 2133.663156][ T8674] block nbd0: Possible stuck request ffff888107bbc180: control (read@1024,1024B). Runtime 600 seconds [ 2133.674664][ T8674] block nbd0: Possible stuck request ffff888107bbc300: control (read@2048,1024B). Runtime 600 seconds [ 2133.686132][ T8674] block nbd0: Possible stuck request ffff888107bbc480: control (read@3072,1024B). Runtime 600 seconds [ 2133.862205][T17664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2134.062350][T17664] 8021q: adding VLAN 0 to HW filter on device team0 [ 2134.146226][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 2134.154011][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2134.267529][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 2134.275251][ T7905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2135.097937][ T8916] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2135.300194][ T8916] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2135.309932][ T8916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.408722][ T8916] usb 6-1: config 0 descriptor?? [ 2135.718613][ T8916] usb 6-1: Cannot read MAC address [ 2135.725017][ T8916] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2135.855263][ T8916] usb 6-1: USB disconnect, device number 14 [ 2136.132912][T17859] loop0: detected capacity change from 0 to 256 [ 2136.185303][T17859] exfat: Bad value for 'uid' [ 2136.190415][T17859] exfat: Bad value for 'uid' [ 2136.347486][T16243] Bluetooth: hci2: command 0x0406 tx timeout [ 2136.790433][T17664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2138.201266][T17883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2355'. [ 2139.417848][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2140.176908][T17664] veth0_vlan: entered promiscuous mode [ 2140.359466][T17664] veth1_vlan: entered promiscuous mode [ 2140.513166][T17904] loop0: detected capacity change from 0 to 1764 [ 2140.567446][T17901] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2140.584751][T17904] iso9660: Bad value for 'uid' [ 2140.590139][T17904] iso9660: Bad value for 'uid' [ 2140.929608][T16243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2140.948880][T16243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2140.959356][T16243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2140.986162][T16243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2141.017945][T16243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2141.414634][T17664] veth0_macvtap: entered promiscuous mode [ 2141.530358][T17664] veth1_macvtap: entered promiscuous mode [ 2142.038247][T16243] Bluetooth: hci0: command 0x0406 tx timeout [ 2142.053484][T17664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2142.104214][T17664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2142.220462][ T4331] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.298473][ T4331] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.374314][ T4331] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.413861][T17928] loop0: detected capacity change from 0 to 16 [ 2142.441747][ T4331] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.531750][T17928] erofs (device loop0): mounted with root inode @ nid 36. [ 2142.860016][T17928] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 2142.880421][T16243] erofs (device loop0): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192 [ 2142.964525][T17928] erofs (device loop0): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192 [ 2142.976664][T17928] erofs (device loop0): read error -117 @ 1 of nid 89 [ 2143.017974][T17909] chnl_net:caif_netlink_parms(): no params data found [ 2143.040981][ T30] audit: type=1800 audit(1765045218.062:805): pid=17928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2366" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 2143.086107][T17928] ===================================================== [ 2143.093632][T17928] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 2143.101693][T17928] _copy_to_iter+0xef3/0x33f0 [ 2143.106761][T17928] copy_page_to_iter+0x482/0x910 [ 2143.111944][T17928] filemap_read+0xcfd/0x2300 [ 2143.117092][T17928] erofs_file_read_iter+0x297/0x2f0 [ 2143.122587][T17928] vfs_read+0x8ed/0xf90 [ 2143.128508][T17928] __x64_sys_read+0x1fb/0x4d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2143.133423][T17928] x64_sys_call+0x3123/0x3e70 [ 2143.145614][T16243] Bluetooth: hci4: command tx timeout [ 2143.152029][T17928] do_syscall_64+0xd9/0xf80 [ 2143.159548][T17928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2143.165816][T17928] [ 2143.168247][T17928] [ 2143.168247][T17928] [ 2143.177364][T17928] Uninit was stored to memory at: [ 2143.182866][T17928] LZ4_decompress_safe_partial+0x1f86/0x2190 [ 2143.189347][T17928] z_erofs_lz4_decompress+0x24ad/0x2990 [ 2143.195256][T17928] z_erofs_decompress_queue+0x3205/0x6d70 [ 2143.201240][T17928] z_erofs_runqueue+0x33f7/0x3630 [ 2143.206632][T17928] z_erofs_read_folio+0x473/0x8c0 [ 2143.211887][T17928] filemap_get_pages+0x30c3/0x3cf0 [ 2143.217333][T17928] filemap_read+0x5d2/0x2300 [ 2143.222149][T17928] erofs_file_read_iter+0x297/0x2f0 [ 2143.227728][T17928] __kernel_read+0x7e1/0xe20 [ 2143.232549][T17928] integrity_kernel_read+0x77/0x90 [ 2143.238182][T17928] ima_calc_file_hash+0x17cb/0x4050 [ 2143.243620][T17928] ima_collect_measurement+0x45d/0xe50 [ 2143.250227][T17928] process_measurement+0x2c90/0x4130 [ 2143.255876][T17928] ima_file_check+0x90/0xd0 [ 2143.260605][T17928] security_file_post_open+0xbf/0x530 [ 2143.266520][T17928] path_openat+0x64c4/0x7160 [ 2143.271393][T17928] do_filp_open+0x280/0x660 [ 2143.276329][T17928] do_sys_openat2+0x1c6/0x430 [ 2143.281190][T17928] __x64_sys_openat+0x240/0x300 [ 2143.286372][T17928] x64_sys_call+0x3597/0x3e70 [ 2143.291273][T17928] do_syscall_64+0xd9/0xf80 [ 2143.296141][T17928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2143.302318][T17928] [ 2143.305014][T17928] Uninit was stored to memory at: [ 2143.310325][T17928] LZ4_decompress_safe_partial+0x1f50/0x2190 [ 2143.316686][T17928] z_erofs_lz4_decompress+0x24ad/0x2990 [ 2143.322472][T17928] z_erofs_decompress_queue+0x3205/0x6d70 [ 2143.328561][T17928] z_erofs_runqueue+0x33f7/0x3630 [ 2143.333824][T17928] z_erofs_read_folio+0x473/0x8c0 [ 2143.339323][T17928] filemap_get_pages+0x30c3/0x3cf0 [ 2143.344840][T17928] filemap_read+0x5d2/0x2300 [ 2143.349654][T17928] erofs_file_read_iter+0x297/0x2f0 [ 2143.355187][T17928] __kernel_read+0x7e1/0xe20 [ 2143.360042][T17928] integrity_kernel_read+0x77/0x90 [ 2143.365521][T17928] ima_calc_file_hash+0x17cb/0x4050 [ 2143.371016][T17928] ima_collect_measurement+0x45d/0xe50 [ 2143.376885][T17928] process_measurement+0x2c90/0x4130 [ 2143.382415][T17928] ima_file_check+0x90/0xd0 [ 2143.387394][T17928] security_file_post_open+0xbf/0x530 [ 2143.392980][T17928] path_openat+0x64c4/0x7160 [ 2143.398031][T17928] do_filp_open+0x280/0x660 [ 2143.402741][T17928] do_sys_openat2+0x1c6/0x430 [ 2143.407728][T17928] __x64_sys_openat+0x240/0x300 [ 2143.412835][T17928] x64_sys_call+0x3597/0x3e70 [ 2143.417915][T17928] do_syscall_64+0xd9/0xf80 [ 2143.422745][T17928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2143.429014][T17928] [ 2143.431440][T17928] Uninit was stored to memory at: [ 2143.436919][T17928] LZ4_decompress_safe_partial+0x1f18/0x2190 [ 2143.443148][T17928] z_erofs_lz4_decompress+0x24ad/0x2990 [ 2143.449141][T17928] z_erofs_decompress_queue+0x3205/0x6d70 [ 2143.455654][T17928] z_erofs_runqueue+0x33f7/0x3630 [ 2143.460926][T17928] z_erofs_read_folio+0x473/0x8c0 [ 2143.466411][T17928] filemap_get_pages+0x30c3/0x3cf0 [ 2143.471756][T17928] filemap_read+0x5d2/0x2300 [ 2143.476786][T17928] erofs_file_read_iter+0x297/0x2f0 [ 2143.482200][T17928] __kernel_read+0x7e1/0xe20 [ 2143.487246][T17928] integrity_kernel_read+0x77/0x90 [ 2143.492571][T17928] ima_calc_file_hash+0x17cb/0x4050 [ 2143.498234][T17928] ima_collect_measurement+0x45d/0xe50 [ 2143.503962][T17928] process_measurement+0x2c90/0x4130 [ 2143.509627][T17928] ima_file_check+0x90/0xd0 [ 2143.514548][T17928] security_file_post_open+0xbf/0x530 [ 2143.520130][T17928] path_openat+0x64c4/0x7160 [ 2143.525041][T17928] do_filp_open+0x280/0x660 [ 2143.529744][T17928] do_sys_openat2+0x1c6/0x430 [ 2143.534838][T17928] __x64_sys_openat+0x240/0x300 [ 2143.539884][T17928] x64_sys_call+0x3597/0x3e70 [ 2143.545360][T17928] do_syscall_64+0xd9/0xf80 [ 2143.550095][T17928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2143.556331][T17928] [ 2143.558761][T17928] Uninit was stored to memory at: [ 2143.564081][T17928] LZ4_decompress_safe_partial+0x1fbc/0x2190 [ 2143.570516][T17928] z_erofs_lz4_decompress+0x24ad/0x2990 [ 2143.576613][T17928] z_erofs_decompress_queue+0x3205/0x6d70 [ 2143.582593][T17928] z_erofs_decompressqueue_work+0x67/0x90 [ 2143.589744][T17928] process_scheduled_works+0xb91/0x1d80 [ 2143.595879][T17928] worker_thread+0xedf/0x1590 [ 2143.600852][T17928] kthread+0xd5c/0xf00 [ 2143.605314][T17928] ret_from_fork+0x208/0x710 [ 2143.610260][T17928] ret_from_fork_asm+0x1a/0x30 [ 2143.615367][T17928] [ 2143.617792][T17928] Uninit was stored to memory at: [ 2143.623093][T17928] LZ4_decompress_safe_partial+0x1f86/0x2190 [ 2143.629639][T17928] z_erofs_lz4_decompress+0x24ad/0x2990 [ 2143.638407][T17928] z_erofs_decompress_queue+0x3205/0x6d70 [ 2143.644563][T17928] z_erofs_decompressqueue_work+0x67/0x90 [ 2143.650527][T17928] process_scheduled_works+0xb91/0x1d80 [ 2143.656458][T17928] worker_thread+0xedf/0x1590 [ 2143.661311][T17928] kthread+0xd5c/0xf00 [ 2143.665766][T17928] ret_from_fork+0x208/0x710 [ 2143.672946][T17928] ret_from_fork_asm+0x1a/0x30 [ 2143.678191][T17928] [ 2143.680620][T17928] Uninit was stored to memory at: [ 2143.686049][T17928] LZ4_decompress_safe_partial+0x1f50/0x2190 [ 2143.692368][T17928] z_erofs_lz4_decompress+0x24ad/0x2990 [ 2143.698338][T17928] z_erofs_decompress_queue+0x3205/0x6d70 [ 2143.704568][T17928] z_erofs_decompressqueue_work+0x67/0x90 [ 2143.710548][T17928] process_scheduled_works+0xb91/0x1d80 [ 2143.716566][T17928] worker_thread+0xedf/0x1590 [ 2143.721431][T17928] kthread+0xd5c/0xf00 [ 2143.726076][T17928] ret_from_fork+0x208/0x710 [ 2143.730945][T17928] ret_from_fork_asm+0x1a/0x30 [ 2143.736202][T17928] [ 2143.738624][T17928] Uninit was stored to memory at: [ 2143.743940][T17928] LZ4_decompress_safe_partial+0x1f18/0x2190 [ 2143.750322][T17928] z_erofs_lz4_decompress+0x24ad/0x2990 [ 2143.756420][T17928] z_erofs_decompress_queue+0x3205/0x6d70 [ 2143.762397][T17928] z_erofs_decompressqueue_work+0x67/0x90 [ 2143.768592][T17928] process_scheduled_works+0xb91/0x1d80 [ 2143.774498][T17928] worker_thread+0xedf/0x1590 [ 2143.779345][T17928] kthread+0xd5c/0xf00 [ 2143.783606][T17928] ret_from_fork+0x208/0x710 [ 2143.790389][T17928] ret_from_fork_asm+0x1a/0x30 [ 2143.796049][T17928] [ 2143.798477][T17928] Uninit was created at: [ 2143.803106][T17928] __alloc_frozen_pages_noprof+0x421/0xab0 [ 2143.809351][T17928] alloc_pages_mpol+0x328/0x860 [ 2143.814720][T17928] folio_alloc_noprof+0x109/0x360 [ 2143.819989][T17928] filemap_alloc_folio_noprof+0xda/0x480 [ 2143.826067][T17928] page_cache_ra_order+0x8b8/0x1660 [ 2143.831554][T17928] page_cache_sync_ra+0x10a2/0x1610 [ 2143.837187][T17928] filemap_get_pages+0xcb3/0x3cf0 [ 2143.842440][T17928] filemap_read+0x5d2/0x2300 [ 2143.847457][T17928] erofs_file_read_iter+0x297/0x2f0 [ 2143.852862][T17928] __kernel_read+0x7e1/0xe20 [ 2143.857815][T17928] integrity_kernel_read+0x77/0x90 [ 2143.863139][T17928] ima_calc_file_hash+0x17cb/0x4050 [ 2143.869656][T17928] ima_collect_measurement+0x45d/0xe50 [ 2143.875717][T17928] process_measurement+0x2c90/0x4130 [ 2143.881244][T17928] ima_file_check+0x90/0xd0 [ 2143.886083][T17928] security_file_post_open+0xbf/0x530 [ 2143.891646][T17928] path_openat+0x64c4/0x7160 [ 2143.896632][T17928] do_filp_open+0x280/0x660 [ 2143.901457][T17928] do_sys_openat2+0x1c6/0x430 [ 2143.906551][T17928] __x64_sys_openat+0x240/0x300 [ 2143.911610][T17928] x64_sys_call+0x3597/0x3e70 [ 2143.916740][T17928] do_syscall_64+0xd9/0xf80 [ 2143.921486][T17928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2143.927736][T17928] [ 2143.930248][T17928] Bytes 3928-3946 of 4096 are uninitialized [ 2143.936499][T17928] Memory access of size 4096 starts at ffff88811cbed000 [ 2143.943567][T17928] Data copied to user address 00002000000041c0 [ 2143.950099][T17928] [ 2143.952572][T17928] CPU: 0 UID: 0 PID: 17928 Comm: syz.0.2366 Not tainted syzkaller #0 PREEMPT(none) [ 2143.962268][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2143.972707][T17928] ===================================================== [ 2143.980036][T17928] Disabling lock debugging due to kernel taint [ 2143.986447][T17928] Kernel panic - not syncing: kmsan.panic set ... [ 2143.993021][T17928] CPU: 0 UID: 0 PID: 17928 Comm: syz.0.2366 Tainted: G B syzkaller #0 PREEMPT(none) [ 2144.004196][T17928] Tainted: [B]=BAD_PAGE [ 2144.008471][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2144.018709][T17928] Call Trace: [ 2144.022128][T17928] [ 2144.025197][T17928] __dump_stack+0x26/0x30 [ 2144.029752][T17928] dump_stack_lvl+0x53/0x270 [ 2144.034565][T17928] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2144.040699][T17928] dump_stack+0x1e/0x25 [ 2144.045059][T17928] vpanic+0x435/0xd30 [ 2144.049292][T17928] panic+0x15d/0x160 [ 2144.053461][T17928] kmsan_report+0x31c/0x320 [ 2144.058240][T17928] ? kmsan_internal_check_memory+0x16c/0x230 [ 2144.064454][T17928] ? kmsan_copy_to_user+0xf1/0x190 [ 2144.069780][T17928] ? _copy_to_iter+0xef3/0x33f0 [ 2144.074829][T17928] ? copy_page_to_iter+0x482/0x910 [ 2144.080137][T17928] ? filemap_read+0xcfd/0x2300 [ 2144.085085][T17928] ? erofs_file_read_iter+0x297/0x2f0 [ 2144.090637][T17928] ? vfs_read+0x8ed/0xf90 [ 2144.095143][T17928] ? __x64_sys_read+0x1fb/0x4d0 [ 2144.100182][T17928] ? x64_sys_call+0x3123/0x3e70 [ 2144.105225][T17928] ? do_syscall_64+0xd9/0xf80 [ 2144.110103][T17928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2144.116352][T17928] ? update_misfit_status+0x32/0xaa0 [ 2144.122021][T17928] ? kmsan_get_metadata+0xfb/0x160 [ 2144.127348][T17928] ? kmsan_get_metadata+0xfb/0x160 [ 2144.132671][T17928] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2144.138697][T17928] ? trace_raw_output_file_check_and_advance_wb_err+0x3d1/0x410 [ 2144.146651][T17928] ? filter_irq_stacks+0x49/0x190 [ 2144.151920][T17928] ? kmsan_get_metadata+0xfb/0x160 [ 2144.157243][T17928] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2144.163269][T17928] ? kmsan_get_metadata+0xfb/0x160 [ 2144.168618][T17928] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2144.174659][T17928] kmsan_internal_check_memory+0x16c/0x230 [ 2144.180707][T17928] kmsan_copy_to_user+0xf1/0x190 [ 2144.185865][T17928] _copy_to_iter+0xef3/0x33f0 [ 2144.190748][T17928] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2144.196801][T17928] ? filemap_get_pages+0x3966/0x3cf0 [ 2144.202500][T17928] copy_page_to_iter+0x482/0x910 [ 2144.207666][T17928] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2144.213697][T17928] filemap_read+0xcfd/0x2300 [ 2144.218595][T17928] ? __rcu_read_unlock+0x6d/0xd0 [ 2144.223852][T17928] ? aa_file_perm+0x41a/0x2130 [ 2144.228869][T17928] ? aa_file_perm+0x535/0x2130 [ 2144.233818][T17928] ? __rcu_read_unlock+0x6d/0xd0 [ 2144.238950][T17928] ? futex_unqueue+0x225/0x2c0 [ 2144.243971][T17928] ? futex_unqueue+0x22d/0x2c0 [ 2144.248945][T17928] ? __x64_sys_read+0x1fb/0x4d0 [ 2144.254039][T17928] erofs_file_read_iter+0x297/0x2f0 [ 2144.259436][T17928] vfs_read+0x8ed/0xf90 [ 2144.263879][T17928] ? __pfx_erofs_file_read_iter+0x10/0x10 [ 2144.269893][T17928] __x64_sys_read+0x1fb/0x4d0 [ 2144.274814][T17928] x64_sys_call+0x3123/0x3e70 [ 2144.279691][T17928] do_syscall_64+0xd9/0xf80 [ 2144.284397][T17928] ? clear_bhb_loop+0x40/0x90 [ 2144.289248][T17928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2144.295322][T17928] RIP: 0033:0x7feeeb58f749 [ 2144.299869][T17928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2144.319745][T17928] RSP: 002b:00007feeec454038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2144.328343][T17928] RAX: ffffffffffffffda RBX: 00007feeeb7e5fa0 RCX: 00007feeeb58f749 [ 2144.336459][T17928] RDX: 0000000000002070 RSI: 00002000000041c0 RDI: 0000000000000004 [ 2144.344567][T17928] RBP: 00007feeeb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 2144.352673][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2144.360770][T17928] R13: 00007feeeb7e6038 R14: 00007feeeb7e5fa0 R15: 00007fffb3cedee8 [ 2144.368937][T17928] [ 2144.372427][T17928] Kernel Offset: disabled [ 2144.376837][T17928] Rebooting in 86400 seconds..