last executing test programs: 2m33.27325872s ago: executing program 3 (id=2719): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, 0x0) 2m31.873856647s ago: executing program 1 (id=2721): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x3, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66", 0x9, 0x2}, {0x1, 0x80000001, 0x0, &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52", 0x4a, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m31.728348961s ago: executing program 3 (id=2724): r0 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d3000"], 0xbc}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x13, r8, 0x0) 2m31.299981866s ago: executing program 1 (id=2726): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2m30.29019943s ago: executing program 1 (id=2727): syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x5, 0xc1, 0xe}}}, 0xc) 2m30.28212705s ago: executing program 3 (id=2728): socket$netlink(0x10, 0x3, 0x0) r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(0x0, 0x66, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x0, 0x20000, 0x1}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe(&(0x7f0000000240)) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', 0x0, 0xc0, &(0x7f0000000040)=ANY=[@ANYBLOB='defcontex']) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x5e) 2m29.823455705s ago: executing program 1 (id=2729): r0 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d3000"], 0xbc}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x13, r9, 0x0) 2m28.522132269s ago: executing program 1 (id=2730): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0x0, r1) socket(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 2m24.482435173s ago: executing program 3 (id=2733): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) symlink(0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@hyper}) 2m24.294740159s ago: executing program 1 (id=2734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x3, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66", 0x9, 0x2}, {0x1, 0x80000001, 0x0, &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52", 0x4a, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m22.198329099s ago: executing program 3 (id=2738): r0 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d3000"], 0xbc}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x13, r8, 0x0) 2m20.425893579s ago: executing program 3 (id=2740): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4cbe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x48815}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 2m8.820957096s ago: executing program 32 (id=2734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x3, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66", 0x9, 0x2}, {0x1, 0x80000001, 0x0, &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52", 0x4a, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m4.588516757s ago: executing program 33 (id=2740): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4cbe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x48815}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 22.277461258s ago: executing program 0 (id=2904): r0 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d3000"], 0xbc}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x13, r8, 0x0) 13.047614566s ago: executing program 4 (id=2917): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000073000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.986326277s ago: executing program 0 (id=2918): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 12.722941216s ago: executing program 4 (id=2919): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000", 0xb3) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 12.689726977s ago: executing program 0 (id=2920): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x100001, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="e0000000110001"], 0xe0}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32=0x1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xffffffffffffffff) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 11.662742732s ago: executing program 4 (id=2921): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = gettid() syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) unshare(0x24020400) getresgid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) fchown(r3, 0xee01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0xff5b, 0x2, 0x0, 0xce020b, 0x1}, 0x9c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB]) 11.282639074s ago: executing program 0 (id=2922): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x89c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 9.626240159s ago: executing program 0 (id=2923): socket(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x80, 0x43e71efe83316a33, 0x2, 0xfe, 0x1, 0xfd, 0x0, 0x200}, [@RTA_OIF={0x8}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000200), {0x7fff}, 0x0, 0x0, &(0x7f0000000680)=""/86, &(0x7f00000002c0)}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c005) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)='\\', 0x1) r4 = gettid() dup2(r0, r2) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 5.582678475s ago: executing program 2 (id=2930): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) close_range(r0, 0xffffffffffffffff, 0x0) 5.245640205s ago: executing program 2 (id=2931): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x9, 0x2}}]}}]}, 0x44}}, 0x4080) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000"], 0x4c}}, 0x40000) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) process_vm_writev(r3, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.11781101s ago: executing program 4 (id=2932): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x89c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 4.002866127s ago: executing program 2 (id=2933): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = gettid() syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) unshare(0x24020400) getresgid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) fchown(r3, 0xee01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0xff5b, 0x2, 0x0, 0xce020b, 0x1}, 0x9c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB]) 2.040090553s ago: executing program 4 (id=2934): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prlimit64(0x0, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e68540102030109022400010000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1.954995375s ago: executing program 5 (id=2935): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000140), 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x0, 0x2) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1.759305442s ago: executing program 2 (id=2936): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000073000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 974.970608ms ago: executing program 5 (id=2937): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000002380), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) 834.857502ms ago: executing program 2 (id=2938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2284001, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xd, 0x59}) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x3, 0xff) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r0], 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x24}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xc3, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) recvfrom$packet(r3, &(0x7f0000000280)=""/23, 0x17, 0x40000061, &(0x7f0000000300)={0x11, 0x3, r7, 0x1, 0x36, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 217.077563ms ago: executing program 5 (id=2939): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 142.617646ms ago: executing program 0 (id=2940): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {0x0}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 28.583249ms ago: executing program 2 (id=2941): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x3d, 0x0, 0x1}, 0x28) socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000feffff7f0200", 0x1b) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x1, 0x0, 0x0, 0x9, @tick=0x5, {}, {}, @result}, {0x81, 0x0, 0x0, 0x0, @tick, {0x6}, {0x5, 0x7}, @control={0x0, 0x4}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5a5, {0x0, 0xf9}, {0x0, 0xff}, @note={0x0, 0x1, 0x3, 0x1, 0x3}}], 0x70) 0s ago: executing program 5 (id=2942): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x89c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) kernel console output (not intermixed with test programs): ed to keep mac addresses unique to avoid problems! [ 715.229297][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.240607][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.258091][T12506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.985053][T12506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.000320][T12506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.009448][T12506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.018488][T12506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.178087][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.204350][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.253239][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.274066][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.653101][ T966] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 716.719764][T12711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.742619][T12711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.757895][ T5831] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 716.793297][ T5831] hid-generic 0000:0000:0000.002F: hidraw3: HID v0.00 Device [syz1] on syz0 [ 716.834331][ T966] usb 1-1: Using ep0 maxpacket: 32 [ 716.859917][ T966] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 716.869458][ T966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.891176][ T966] usb 1-1: config 0 has no interface number 0 [ 716.904624][ T966] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 716.934283][ T966] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 716.944299][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.951081][T12714] fido_id[12714]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 716.958446][ T966] usb 1-1: Product: syz [ 716.981330][ T966] usb 1-1: Manufacturer: syz [ 716.986508][ T966] usb 1-1: SerialNumber: syz [ 717.011719][ T966] usb 1-1: config 0 descriptor?? [ 717.029296][ T966] hub 1-1:0.89: bad descriptor, ignoring hub [ 717.049711][ T966] hub: probe of 1-1:0.89 failed with error -5 [ 717.785493][T12742] tmpfs: Bad value for 'mpol' [ 718.313252][ T966] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 718.492232][ T5803] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 718.523257][ T966] usb 2-1: Using ep0 maxpacket: 32 [ 718.528960][ T5803] hid-generic 0000:0000:0000.0030: hidraw3: HID v0.00 Device [syz1] on syz0 [ 718.560517][ T966] usb 2-1: unable to get BOS descriptor or descriptor too short [ 718.594272][ T966] usb 2-1: config 4 has an invalid interface number: 248 but max is 2 [ 718.613125][ T966] usb 2-1: config 4 has an invalid interface number: 102 but max is 2 [ 718.652113][ T966] usb 2-1: config 4 has an invalid interface number: 210 but max is 2 [ 718.682544][ T966] usb 2-1: config 4 has an invalid interface number: 29 but max is 2 [ 718.711337][ T966] usb 2-1: config 4 has 5 interfaces, different from the descriptor's value: 3 [ 718.730615][T12767] fido_id[12767]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 718.753087][ T966] usb 2-1: config 4 has no interface number 1 [ 718.775001][ T966] usb 2-1: config 4 has no interface number 2 [ 718.805802][ T966] usb 2-1: config 4 has no interface number 3 [ 718.811919][ T966] usb 2-1: config 4 has no interface number 4 [ 718.859670][ T966] usb 2-1: config 4 interface 102 altsetting 6 bulk endpoint 0xB has invalid maxpacket 1023 [ 718.884961][ T966] usb 2-1: config 4 interface 102 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.898131][ T966] usb 2-1: too many endpoints for config 4 interface 210 altsetting 96: 254, using maximum allowed: 30 [ 718.991271][ T966] usb 2-1: config 4 interface 210 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 719.013119][ T966] usb 2-1: too many endpoints for config 4 interface 29 altsetting 98: 214, using maximum allowed: 30 [ 719.027924][ T966] usb 2-1: config 4 interface 29 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 214 [ 719.153145][ T5803] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 719.262391][ T966] usb 2-1: config 4 interface 0 has no altsetting 0 [ 719.282006][ T966] usb 2-1: config 4 interface 248 has no altsetting 0 [ 719.293120][ T966] usb 2-1: config 4 interface 102 has no altsetting 0 [ 719.306367][ T966] usb 2-1: config 4 interface 210 has no altsetting 0 [ 719.316443][ T966] usb 2-1: config 4 interface 29 has no altsetting 0 [ 719.328383][ T966] usb 2-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=6c.22 [ 719.355312][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.391529][ T966] usb 2-1: Product: syz [ 719.406676][ T5803] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 719.423751][ T966] usb 2-1: Manufacturer: syz [ 719.428484][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.443218][ T966] usb 2-1: SerialNumber: syz [ 719.448772][ T5803] usb 4-1: Product: syz [ 719.466218][ T5803] usb 4-1: Manufacturer: syz [ 719.471048][ T5803] usb 4-1: SerialNumber: syz [ 719.483506][ T5803] usb 4-1: config 0 descriptor?? [ 719.667393][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 719.689167][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 719.700105][ T5803] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 719.708625][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 719.728004][ T966] usb 2-1: unknown number of interfaces: 5 [ 719.815626][ T966] usb 2-1: USB disconnect, device number 122 [ 720.708966][ T5803] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 720.911350][T12797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.946742][T12797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.858642][ T787] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 722.043291][ T787] hid-generic 0000:0000:0000.0031: hidraw3: HID v0.00 Device [syz1] on syz0 [ 722.478889][ T787] usb 4-1: USB disconnect, device number 56 [ 722.525152][T12834] fido_id[12834]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 722.726304][T12840] fuse: Bad value for 'fd' [ 725.944128][T12861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.952860][T12861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.154154][ T5803] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 726.241643][ T9] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 726.251013][ T9] hid-generic 0000:0000:0000.0032: hidraw3: HID v0.00 Device [syz1] on syz0 [ 726.370846][ T5803] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 726.404164][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.412222][ T5803] usb 2-1: Product: syz [ 726.427933][T12884] fido_id[12884]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 726.440249][ T5803] usb 2-1: Manufacturer: syz [ 726.463049][ T5803] usb 2-1: SerialNumber: syz [ 726.483570][ T5803] usb 2-1: config 0 descriptor?? [ 726.845924][ T5803] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 727.013346][T12900] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 727.038486][T12900] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 728.339789][ T5803] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 730.611327][ T5831] usb 2-1: USB disconnect, device number 123 [ 730.803281][T12927] kAFS: No cell specified [ 732.933310][ T5831] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 733.082974][ T966] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 733.135736][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.146439][ T5831] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 733.156211][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.176521][ T5831] usb 2-1: config 0 descriptor?? [ 733.192168][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 733.283031][ T966] usb 4-1: Using ep0 maxpacket: 32 [ 733.291965][ T966] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 733.300365][ T966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.310672][ T966] usb 4-1: config 0 has no interface number 0 [ 733.317019][ T966] usb 4-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 733.333031][ T966] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 733.342187][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.350717][ T966] usb 4-1: Product: syz [ 733.355255][ T966] usb 4-1: Manufacturer: syz [ 733.359912][ T966] usb 4-1: SerialNumber: syz [ 733.373740][ T966] usb 4-1: config 0 descriptor?? [ 733.381311][ T966] hub 4-1:0.89: bad descriptor, ignoring hub [ 733.388021][ T966] hub: probe of 4-1:0.89 failed with error -5 [ 733.670271][ T5831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 733.679477][ T5831] pwc: recv_control_msg error -32 req 02 val 2700 [ 733.687334][ T5831] pwc: recv_control_msg error -32 req 02 val 2c00 [ 733.696910][ T5831] pwc: recv_control_msg error -32 req 04 val 1000 [ 733.709860][ T5831] pwc: recv_control_msg error -32 req 04 val 1300 [ 733.717126][ T5831] pwc: recv_control_msg error -32 req 04 val 1400 [ 733.724655][ T5831] pwc: recv_control_msg error -32 req 02 val 2000 [ 733.766468][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.775982][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.936578][ T5831] pwc: recv_control_msg error -71 req 04 val 1500 [ 733.953566][ T5831] pwc: recv_control_msg error -71 req 02 val 2500 [ 733.970786][ T5831] pwc: recv_control_msg error -71 req 02 val 2400 [ 733.977775][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 733.991789][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 733.998852][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 734.011513][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 734.018826][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 734.028477][ T5831] pwc: Registered as video103. [ 734.039693][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 734.083418][ T5831] usb 2-1: USB disconnect, device number 124 [ 734.916334][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.928536][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.915936][T12977] kAFS: No cell specified [ 736.200057][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.209062][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.421210][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.470866][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.770833][T12986] syz_tun: entered allmulticast mode [ 736.779348][T12985] syz_tun: left allmulticast mode [ 736.943540][T12989] vivid-003: disconnect [ 737.709944][T12987] vivid-003: reconnect [ 737.806397][T12998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.826943][T12998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.995785][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.007483][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.354386][T13005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.384127][T13005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.539841][T13012] syzkaller0: entered promiscuous mode [ 738.546002][T13012] syzkaller0: entered allmulticast mode [ 738.568982][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2271'. [ 738.841279][T13016] kAFS: No cell specified [ 739.960296][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.986447][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.263615][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.272264][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.691765][T13040] vivid-001: disconnect [ 741.456221][T13033] vivid-001: reconnect [ 741.568772][T13039] nbd0: detected capacity change from 0 to 63 [ 741.782796][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.829866][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.873248][T12507] block nbd0: Receive control failed (result -104) [ 742.123977][T13051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.139254][T13051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.602597][ T28] audit: type=1804 audit(1774985829.875:15): pid=13065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2281" name="/newroot/575/file1" dev="fuse" ino=1 res=1 errno=0 [ 743.021748][ T28] audit: type=1800 audit(1774985830.335:16): pid=13065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2281" name="/" dev="fuse" ino=1 res=0 errno=0 [ 743.411795][T13077] vivid-001: disconnect [ 744.132307][T13074] vivid-001: reconnect [ 744.610757][T13092] vivid-000: disconnect [ 745.376123][T13087] vivid-000: reconnect [ 745.468520][T13096] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 745.623335][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.635216][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.772528][T12507] Bluetooth: hci4: link tx timeout [ 745.778957][T12507] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 745.793838][ T5770] Bluetooth: hci4: link tx timeout [ 745.799445][ T5770] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 745.843366][ T966] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 745.923110][ T5770] Bluetooth: hci4: link tx timeout [ 745.928304][ T5770] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 746.043958][ T966] usb 2-1: Using ep0 maxpacket: 32 [ 746.051791][ T966] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.064468][ T966] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.082056][ T966] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 746.091796][ T966] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 746.100670][ T966] usb 2-1: Product: syz [ 746.105336][ T966] usb 2-1: Manufacturer: syz [ 746.132563][ T966] hub 2-1:4.0: USB hub found [ 746.335689][ T966] hub 2-1:4.0: 2 ports detected [ 746.724391][T13108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.735131][T13108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.964831][T13114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.976686][T13114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.326955][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.333811][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.369616][T13099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.399919][T13099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.639007][T13124] vivid-001: disconnect [ 747.668203][ T5803] hub 2-1:4.0: activate --> -90 [ 747.803326][ T5770] Bluetooth: hci4: command 0x0406 tx timeout [ 748.370065][T13122] vivid-001: reconnect [ 749.880230][ T787] usb 2-1: USB disconnect, device number 125 [ 750.967350][T13142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.960627][T13158] vivid-002: disconnect [ 752.761333][T13156] vivid-002: reconnect [ 752.910752][T13153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.919602][T13153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.983036][ T5831] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 753.174969][ T5831] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 753.191939][ T5831] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 753.202383][ T5831] usb 2-1: config 1 interface 0 has no altsetting 0 [ 753.213407][ T5831] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 753.213433][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.213451][ T5831] usb 2-1: Product: syz [ 753.235372][ T5831] usb 2-1: Manufacturer: syz [ 753.235392][ T5831] usb 2-1: SerialNumber: syz [ 753.238872][T13154] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 753.238978][T13154] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 753.771737][ T5831] rtl8150 2-1:1.0: couldn't reset the device [ 753.778494][ T5831] rtl8150: probe of 2-1:1.0 failed with error -5 [ 753.796654][ T5831] usb 2-1: USB disconnect, device number 126 [ 754.416789][T13182] syz_tun: entered allmulticast mode [ 754.434479][T13181] syz_tun: left allmulticast mode [ 756.494439][T13200] ======================================================= [ 756.494439][T13200] WARNING: The mand mount option has been deprecated and [ 756.494439][T13200] and is ignored by this kernel. Remove the mand [ 756.494439][T13200] option from the mount to silence this warning. [ 756.494439][T13200] ======================================================= [ 756.867052][T13198] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 757.030327][T13196] vivid-002: disconnect [ 757.172343][T13193] vivid-002: reconnect [ 758.667176][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.705982][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.793646][ T8] libceph: connect (1)[c::]:6789 error -101 [ 766.800485][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 767.076266][ T8] libceph: connect (1)[c::]:6789 error -101 [ 767.085191][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 767.291673][T13262] ceph: No mds server is up or the cluster is laggy [ 768.077159][ T8] libceph: connect (1)[c::]:6789 error -101 [ 768.119046][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 768.549076][T13281] virt_wifi0 speed is unknown, defaulting to 1000 [ 769.305964][T13295] vivid-000: disconnect [ 770.036556][T13291] vivid-000: reconnect [ 770.200223][T13299] kAFS: No cell specified [ 772.303430][ T24] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 30 seconds [ 772.314786][ T24] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 30 seconds [ 772.326372][ T24] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 30 seconds [ 772.337386][ T24] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 30 seconds [ 773.292822][T12507] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 773.509728][T13322] fuse: Bad value for 'fd' [ 776.424190][T13352] tipc: Enabled bearer , priority 0 [ 776.434918][T13352] syzkaller0: entered promiscuous mode [ 776.445349][T13352] syzkaller0: entered allmulticast mode [ 776.504088][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2356'. [ 776.514819][T13349] tipc: Resetting bearer [ 776.569266][T13349] tipc: Disabling bearer [ 782.919786][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.936416][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.581766][T13398] tipc: Enabled bearer , priority 0 [ 783.608176][T13398] syzkaller0: entered promiscuous mode [ 783.620054][T13398] syzkaller0: entered allmulticast mode [ 783.667354][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2368'. [ 783.691012][T13396] tipc: Resetting bearer [ 783.704505][T13399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.754728][T13396] tipc: Disabling bearer [ 783.765033][T13399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.564183][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.599187][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.854881][T13424] tipc: Enabled bearer , priority 0 [ 786.872681][T13424] syzkaller0: entered promiscuous mode [ 786.898061][T13424] syzkaller0: entered allmulticast mode [ 786.989924][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2378'. [ 787.113239][T13423] tipc: Resetting bearer [ 787.339301][T13423] tipc: Disabling bearer [ 792.922952][T13464] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 793.090992][T13468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.193211][T13468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.925727][T13472] tipc: Enabled bearer , priority 0 [ 793.928751][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.964700][T13472] syzkaller0: entered promiscuous mode [ 794.043598][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.163060][T13472] syzkaller0: entered allmulticast mode [ 794.174448][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2390'. [ 794.573078][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 795.345228][ T966] tipc: Node number set to 217583405 [ 795.403855][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.412625][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.618548][T13472] tipc: Resetting bearer [ 795.704289][ T28] audit: type=1804 audit(1774985882.995:17): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2391" name="/newroot/45/file1" dev="fuse" ino=1 res=1 errno=0 [ 795.869206][ T28] audit: type=1800 audit(1774985882.995:18): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2391" name="/" dev="fuse" ino=1 res=0 errno=0 [ 795.934252][T13471] tipc: Resetting bearer [ 795.991099][ T28] audit: type=1800 audit(1774985882.995:19): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2391" name="/" dev="fuse" ino=1 res=0 errno=0 [ 796.114692][T13471] tipc: Disabling bearer [ 801.143989][T13516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.163351][T13516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.350876][T13519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.407263][T13519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.541184][T13519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.653702][T13519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.206527][T13521] tipc: Enabled bearer , priority 0 [ 802.229735][T13523] fuse: Bad value for 'fd' [ 802.239924][T13521] syzkaller0: entered promiscuous mode [ 803.829886][ T24] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 60 seconds [ 803.841556][ T24] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 60 seconds [ 803.852789][ T24] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 60 seconds [ 803.864254][ T24] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 60 seconds [ 803.904418][T13521] syzkaller0: entered allmulticast mode [ 803.941190][ T8] tipc: Node number set to 4063025000 [ 803.999068][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2405'. [ 804.115855][T13530] tipc: Resetting bearer [ 804.141653][T13520] tipc: Resetting bearer [ 804.197707][T13520] tipc: Disabling bearer [ 808.480540][T13568] virt_wifi0 speed is unknown, defaulting to 1000 [ 808.769293][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.784245][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.210210][T13580] virt_wifi0 speed is unknown, defaulting to 1000 [ 811.217384][T13585] tipc: Enabled bearer , priority 0 [ 811.244038][T13585] syzkaller0: entered promiscuous mode [ 811.249543][T13585] syzkaller0: entered allmulticast mode [ 811.386598][T13585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2418'. [ 811.671983][T13586] tipc: Resetting bearer [ 811.729071][T13584] tipc: Resetting bearer [ 811.747910][ T5770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 811.756566][ T5770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 811.764716][ T5770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 811.773646][ T5770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 811.782049][ T5770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 811.845112][ T5770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 811.903996][T13584] tipc: Disabling bearer [ 812.206136][T13600] virt_wifi0 speed is unknown, defaulting to 1000 [ 812.564410][T13606] loop6: detected capacity change from 0 to 7 [ 813.643998][T13606] Dev loop6: unable to read RDB block 7 [ 813.676752][T13606] loop6: unable to read partition table [ 813.682545][T13606] loop6: partition table beyond EOD, truncated [ 813.784033][T13606] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 814.225214][ T5770] Bluetooth: hci2: command tx timeout [ 814.341778][T13600] chnl_net:caif_netlink_parms(): no params data found [ 814.745437][T13600] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.763225][T13600] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.770444][T13600] bridge_slave_0: entered allmulticast mode [ 814.787108][T13600] bridge_slave_0: entered promiscuous mode [ 814.923475][T13600] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.930664][T13600] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.960869][T13600] bridge_slave_1: entered allmulticast mode [ 814.979559][T13600] bridge_slave_1: entered promiscuous mode [ 815.242898][T13600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.295349][T13626] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2425'. [ 815.353854][T13627] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 815.458459][T13600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.028959][T13629] fuse: Bad value for 'fd' [ 817.539223][T10281] IPVS: ip_vs_send_async error -19 [ 817.551828][ T5770] Bluetooth: hci2: command tx timeout [ 817.863099][T13639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.873633][T13600] team0: Port device team_slave_0 added [ 817.882270][T13600] team0: Port device team_slave_1 added [ 817.884466][T13639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.016685][T13639] warning: `syz.3.2431' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 818.124349][T13600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.131418][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.183161][T13600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.196375][T13600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.204041][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.249222][T13600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.379254][T13600] hsr_slave_0: entered promiscuous mode [ 818.400499][T13600] hsr_slave_1: entered promiscuous mode [ 819.066792][T13600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.278546][T13650] tipc: Enabled bearer , priority 0 [ 819.563576][ T5770] Bluetooth: hci2: command tx timeout [ 819.904623][T13600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.986885][T13648] syzkaller0: entered promiscuous mode [ 819.992451][T13648] syzkaller0: entered allmulticast mode [ 820.027025][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 820.075318][T13650] tipc: Resetting bearer [ 820.141652][T13644] tipc: Resetting bearer [ 820.284091][T13644] tipc: Disabling bearer [ 821.303508][T13600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.643809][ T5770] Bluetooth: hci2: command tx timeout [ 821.680960][ T787] tipc: Node number set to 4139329720 [ 821.930231][T13600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.701929][T13600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 824.745215][T13600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 824.776561][T13600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 824.903965][T13600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 825.187994][T13679] fuse: Bad value for 'fd' [ 825.188481][T13600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.916791][T13600] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.937595][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.944817][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.891819][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.899221][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.983023][ T5139] udevd[5139]: worker [12381] /devices/virtual/block/nbd0 is taking a long time [ 829.147260][T13600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.325547][T13600] veth0_vlan: entered promiscuous mode [ 829.358960][T13694] tipc: Started in network mode [ 829.401321][T13694] tipc: Node identity 9a9b108ec6e8, cluster identity 4711 [ 829.424584][T13694] tipc: Enabled bearer , priority 0 [ 829.445481][T13600] veth1_vlan: entered promiscuous mode [ 829.480690][T13695] syzkaller0: entered promiscuous mode [ 829.542485][T13695] syzkaller0: entered allmulticast mode [ 829.734583][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2442'. [ 829.800835][T13694] tipc: Resetting bearer [ 829.852104][T13693] tipc: Resetting bearer [ 829.860526][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.896655][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.061411][T13693] tipc: Disabling bearer [ 830.138895][T13600] veth0_macvtap: entered promiscuous mode [ 830.203925][T13600] veth1_macvtap: entered promiscuous mode [ 830.286836][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.333077][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.384943][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.430216][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.443053][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.468900][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.509228][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.533012][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.552849][T13600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.571928][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.763535][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.782968][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.809826][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.840017][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.883257][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.895221][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.907578][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.930076][T13600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.334142][T13600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.343152][T13600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.463075][T13600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.471827][T13600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.760501][T13708] fuse: Bad value for 'fd' [ 833.542215][T11885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.584416][T11885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.753084][T11885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.760961][T11885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.108462][T13717] kAFS: No cell specified [ 834.334356][T13719] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.524630][ T24] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 90 seconds [ 834.542678][ T24] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 90 seconds [ 834.556385][ T24] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 90 seconds [ 834.567565][ T24] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 90 seconds [ 838.156961][T13736] 9pnet: Found fid 0 not clunked [ 840.018461][ T27] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 840.126897][T13745] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 840.304260][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 840.346000][ T27] usb 2-1: config 0 has no interfaces? [ 840.362924][ T27] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 840.372215][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.415989][ T27] usb 2-1: config 0 descriptor?? [ 841.904810][ T27] usb 2-1: USB disconnect, device number 127 [ 842.843419][T13774] tipc: Enabled bearer , priority 0 [ 842.891444][T13774] syzkaller0: entered promiscuous mode [ 842.921315][T13774] syzkaller0: entered allmulticast mode [ 843.146957][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2460'. [ 843.232456][T13779] tipc: Resetting bearer [ 843.265022][T13773] tipc: Resetting bearer [ 843.347056][T13773] tipc: Disabling bearer [ 843.897725][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.990758][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.213185][T13790] vivid-001: disconnect [ 844.313488][T13787] vivid-001: reconnect [ 844.616019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.858643][T13800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.917862][T13800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.420954][T13819] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 847.430118][T13819] IPVS: dh: FWM 3 0x00000003 - no destination available [ 848.119903][ T8] IPVS: starting estimator thread 0... [ 848.223069][T13820] IPVS: using max 22 ests per chain, 52800 per kthread [ 848.307435][ T5770] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 850.721882][T13843] vivid-003: disconnect [ 850.924860][T13838] vivid-003: reconnect [ 852.288084][T13856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.342622][T13856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.723753][T12507] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 854.735768][T12507] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 854.743815][T12507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 854.753863][T12507] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 854.763464][T12507] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 854.773527][T12507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 854.830468][T13870] virt_wifi0 speed is unknown, defaulting to 1000 [ 855.253222][ T966] usb 1-1: USB disconnect, device number 45 [ 855.418327][T13870] chnl_net:caif_netlink_parms(): no params data found [ 855.944406][T13870] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.951610][T13870] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.180123][T13870] bridge_slave_0: entered allmulticast mode [ 856.191435][T13870] bridge_slave_0: entered promiscuous mode [ 856.199907][T13870] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.209686][T13870] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.217919][T13870] bridge_slave_1: entered allmulticast mode [ 856.226128][T13870] bridge_slave_1: entered promiscuous mode [ 856.727927][T13870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.762796][T13870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.890876][ T5770] Bluetooth: hci0: command tx timeout [ 856.921292][ T5770] Bluetooth: hci4: unexpected event for opcode 0x200b [ 857.037163][ T1122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.122033][T13870] team0: Port device team_slave_0 added [ 857.192787][ T1122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.294994][T13870] team0: Port device team_slave_1 added [ 857.515485][ T1122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.574641][T13870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.603022][T13870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.628937][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.729696][T13870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.865820][ T1122] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.979986][T13870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.998791][T13870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.024738][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.081594][T13870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.233655][T13870] hsr_slave_0: entered promiscuous mode [ 858.263379][T13870] hsr_slave_1: entered promiscuous mode [ 858.302424][T13870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.311087][T13870] Cannot create hsr debugfs directory [ 858.747824][ T5770] Bluetooth: hci4: link tx timeout [ 858.839982][ T5770] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 858.932997][ T5770] Bluetooth: hci0: command tx timeout [ 859.314858][T13909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.375226][T13909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.545298][ T1122] tipc: Left network mode [ 860.086289][ T1122] ip6gretap0 (unregistering): left promiscuous mode [ 860.949924][ T5770] Bluetooth: hci4: command 0x0406 tx timeout [ 861.002979][ T5770] Bluetooth: hci0: command tx timeout [ 861.075684][T13912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.084624][T13912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.814609][T13932] vivid-000: disconnect [ 862.004979][T13927] vivid-000: reconnect [ 862.078619][T13914] Process accounting resumed [ 862.330821][T13938] Unsupported ieee802154 address type: 0 [ 863.083174][T12507] Bluetooth: hci0: command tx timeout [ 863.220916][ T1122] gretap0 (unregistering): left promiscuous mode [ 863.934609][T13870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 863.946241][T13870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 864.012268][ T1122] dvmrp8 (unregistering): left allmulticast mode [ 864.029693][T13952] fuse: Bad value for 'fd' [ 864.040017][T13870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 865.115513][ T1122] IPVS: stopping master sync thread 9961 ... [ 865.123032][T11586] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 120 seconds [ 865.134777][T11586] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 120 seconds [ 865.145915][T11586] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 120 seconds [ 865.157097][T11586] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 120 seconds [ 865.234407][T13870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 865.688693][ T1122] bond0: left promiscuous mode [ 865.705330][ T1122] bond_slave_0: left promiscuous mode [ 865.743752][ T1122] bridge0: left promiscuous mode [ 865.766318][ T1122] hsr_slave_0: left promiscuous mode [ 865.791782][ T1122] hsr_slave_1: left promiscuous mode [ 865.798650][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.816404][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.843830][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.851253][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.887873][ T1122] bridge_slave_1: left allmulticast mode [ 865.902961][ T1122] bridge_slave_1: left promiscuous mode [ 865.908727][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.965589][ T1122] bridge_slave_0: left allmulticast mode [ 865.971277][ T1122] bridge_slave_0: left promiscuous mode [ 865.996209][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.113670][ T1122] veth1_macvtap: left promiscuous mode [ 866.119472][ T1122] veth0_macvtap: left promiscuous mode [ 866.133803][ T1122] veth1_vlan: left promiscuous mode [ 866.143263][ T1122] veth0_vlan: left promiscuous mode [ 867.128473][T13981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.169136][T13981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.830324][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 867.927008][T13986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.953525][T13986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.969243][T13986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.981240][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 867.990155][T13986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.001554][T13988] vivid-003: disconnect [ 868.010064][T13987] vivid-003: reconnect [ 868.161149][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.377589][ T1122] bond0 (unregistering): Released all slaves [ 869.513111][T13966] syz_tun: entered allmulticast mode [ 869.519726][T13966] syz_tun: left allmulticast mode [ 869.618025][T13870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.686569][T13870] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.757954][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.765166][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.809229][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.816571][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.019118][T13870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 870.213029][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.219427][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.387895][ T1122] IPVS: stop unused estimator thread 0... [ 871.053573][T14025] dummy0: entered promiscuous mode [ 871.163617][T14025] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 871.215962][T14025] hsr1: entered allmulticast mode [ 871.222463][T14025] dummy0: entered allmulticast mode [ 871.236975][T14025] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 871.321415][T13870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.429531][T13870] veth0_vlan: entered promiscuous mode [ 871.496813][T13870] veth1_vlan: entered promiscuous mode [ 871.591907][T13870] veth0_macvtap: entered promiscuous mode [ 871.618658][T13870] veth1_macvtap: entered promiscuous mode [ 871.700375][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.729866][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.757214][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.771389][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.787770][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.800510][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.828856][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.849653][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.891151][T13870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.954047][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.003224][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.041037][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.084959][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.104635][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.133126][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.153371][T13870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.173035][T13870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.204672][T13870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.249073][T13870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.292988][T13870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.301721][T13870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.330034][T14049] vivid-003: disconnect [ 872.343238][T13870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.358197][T14044] vivid-003: reconnect [ 872.603751][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.611619][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.737252][T11838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.770379][T11838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.793063][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 873.077149][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 873.155635][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.362970][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.417367][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 873.426629][ T8] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 873.455282][ T8] usb 2-1: Product: syz [ 873.459503][ T8] usb 2-1: Manufacturer: syz [ 873.519626][ T8] hub 2-1:4.0: USB hub found [ 873.729779][ T8] hub 2-1:4.0: 2 ports detected [ 874.144023][ T27] usb 3-1: USB disconnect, device number 125 [ 874.239026][ T28] audit: type=1804 audit(1774985961.605:20): pid=14071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2521" name="/newroot/1/file1" dev="fuse" ino=1 res=1 errno=0 [ 874.712974][ T28] audit: type=1800 audit(1774985961.605:21): pid=14071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2521" name="/" dev="fuse" ino=1 res=0 errno=0 [ 874.823409][ T28] audit: type=1800 audit(1774985961.615:22): pid=14071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2521" name="/" dev="fuse" ino=1 res=0 errno=0 [ 875.081636][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.134255][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.374952][ T8] hub 2-1:4.0: activate --> -90 [ 875.404199][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 875.417470][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 875.427650][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 875.437754][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 875.463871][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 875.474162][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 875.581294][ T5921] usb 2-1: USB disconnect, device number 2 [ 875.658839][T14089] virt_wifi0 speed is unknown, defaulting to 1000 [ 876.255851][T14105] vivid-003: disconnect [ 876.293910][T14102] vivid-003: reconnect [ 876.417699][ T1092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.436345][T14109] fuse: Bad value for 'fd' [ 877.563056][T10281] IPVS: ip_vs_send_async error -19 [ 877.569483][ T5770] Bluetooth: hci1: command tx timeout [ 877.668126][T14089] chnl_net:caif_netlink_parms(): no params data found [ 877.793303][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 877.948150][ T1092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.025372][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 878.047072][ T5921] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 878.073095][ T5921] usb 2-1: config 162 has an invalid interface number: 183 but max is 1 [ 878.111197][ T5921] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 878.154240][ T1092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.165159][ T5921] usb 2-1: config 162 has no interface number 0 [ 878.171466][ T5921] usb 2-1: config 162 has no interface number 1 [ 878.220690][ T5921] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 878.303260][ T5921] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 878.353409][ T5921] usb 2-1: config 162 interface 183 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 878.417704][ T5921] usb 2-1: config 162 interface 79 has no altsetting 0 [ 878.442862][ T5921] usb 2-1: config 162 interface 183 has no altsetting 0 [ 878.480691][ T1092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.533289][ T5921] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 878.552252][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.580867][ T5921] usb 2-1: Product: syz [ 878.607807][ T5921] usb 2-1: Manufacturer: syz [ 878.651526][ T5921] usb 2-1: SerialNumber: syz [ 878.689291][T14089] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.753263][T14089] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.783901][T14089] bridge_slave_0: entered allmulticast mode [ 878.822129][T14089] bridge_slave_0: entered promiscuous mode [ 878.882279][T14089] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.935357][T14089] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.942689][T14089] bridge_slave_1: entered allmulticast mode [ 879.004306][T14089] bridge_slave_1: entered promiscuous mode [ 879.642970][ T5770] Bluetooth: hci1: command tx timeout [ 879.660192][ T5921] pl2303 2-1:162.79: required endpoints missing [ 879.713622][ T5921] pl2303 2-1:162.183: required endpoints missing [ 879.791266][ T5921] usb 2-1: USB disconnect, device number 3 [ 879.802791][T14089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.921726][T14089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.166516][T14089] team0: Port device team_slave_0 added [ 880.198232][T14089] team0: Port device team_slave_1 added [ 880.262299][ T1092] tipc: Left network mode [ 880.317724][T14089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.333314][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.573099][T14089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.754929][T14089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.761952][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.840796][T14089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.733105][ T5770] Bluetooth: hci1: command tx timeout [ 882.439048][T14089] hsr_slave_0: entered promiscuous mode [ 882.513547][T14089] hsr_slave_1: entered promiscuous mode [ 882.563167][T14089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 882.589390][T14089] Cannot create hsr debugfs directory [ 882.800230][ T5770] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 884.424448][ T5770] Bluetooth: hci1: command tx timeout [ 884.890527][T14185] kAFS: No cell specified [ 886.888205][ T1092] dvmrp8 (unregistering): left allmulticast mode [ 886.993645][ T1092] IPVS: stopping master sync thread 10449 ... [ 890.349253][ T1092] hsr_slave_0: left promiscuous mode [ 890.408369][ T1092] hsr_slave_1: left promiscuous mode [ 890.488238][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.522067][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.803897][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.811612][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.907493][ T1092] bridge_slave_1: left allmulticast mode [ 890.950217][ T1092] bridge_slave_1: left promiscuous mode [ 890.962990][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.041579][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.073631][ T1092] bridge_slave_0: left allmulticast mode [ 891.100668][ T1092] bridge_slave_0: left promiscuous mode [ 891.133322][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.166674][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.284381][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.398086][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.673400][ T1092] veth1_macvtap: left promiscuous mode [ 892.678995][ T1092] veth1_vlan: left promiscuous mode [ 892.707338][ T1092] veth0_vlan: left promiscuous mode [ 894.618377][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 894.875436][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.953360][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 894.980038][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 894.996512][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.007162][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.057847][ T8] usb 2-1: Product: syz [ 895.062024][ T8] usb 2-1: Manufacturer: syz [ 895.066901][ T8] usb 2-1: SerialNumber: syz [ 895.074831][ T8] usb 2-1: config 0 descriptor?? [ 895.153940][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.162494][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.192923][T11586] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 150 seconds [ 895.203796][T11586] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 150 seconds [ 895.214945][T11586] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 150 seconds [ 895.225992][T11586] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 150 seconds [ 895.270028][ T1092] bond1 (unregistering): Released all slaves [ 897.314035][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 897.451817][ T966] usb 2-1: USB disconnect, device number 4 [ 897.567052][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 897.796238][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.402249][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.894322][T14312] kAFS: No cell specified [ 900.523350][ T966] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 900.569214][ T1092] bond0 (unregistering): Released all slaves [ 900.713163][ T966] usb 2-1: Using ep0 maxpacket: 32 [ 900.737359][ T966] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.753031][ T966] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.784675][ T966] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 900.812325][ T966] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 900.831177][ T966] usb 2-1: Product: syz [ 900.841400][ T966] usb 2-1: Manufacturer: syz [ 900.920673][ T966] hub 2-1:4.0: USB hub found [ 901.193160][ T966] hub 2-1:4.0: 2 ports detected [ 901.733868][T14089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 901.800432][T14089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 901.945667][T14089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 902.046010][T14089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 902.054120][T14324] vivid-001: disconnect [ 902.081976][T14319] vivid-001: reconnect [ 902.269519][ T1092] IPVS: stop unused estimator thread 0... [ 902.435932][T14318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.476523][T14318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.521187][T14089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.631431][T14089] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.696533][ T27] hub 2-1:4.0: activate --> -90 [ 902.704123][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.711317][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.765388][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.772603][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.916088][T11568] usb 2-1: USB disconnect, device number 5 [ 902.922057][ T27] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 904.231036][T14336] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 904.301566][T14089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 904.433591][T14089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 905.151395][T14355] vivid-002: disconnect [ 905.171387][T14089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.184641][T14353] vivid-002: reconnect [ 905.299775][T14089] veth0_vlan: entered promiscuous mode [ 905.314576][T14089] veth1_vlan: entered promiscuous mode [ 905.375811][T14089] veth0_macvtap: entered promiscuous mode [ 905.387944][T14089] veth1_macvtap: entered promiscuous mode [ 905.409785][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.420923][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.432153][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.443399][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.454601][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.466036][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.477150][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.489565][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.501460][T14089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.523493][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.550541][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.560818][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.582278][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.672923][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.686922][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.697980][T14357] kAFS: No cell specified [ 905.717845][T14089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.758246][T14089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.782504][T14089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.021002][T14089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.340525][T14366] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 907.397116][T14089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.420153][T14089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.429567][T14089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.003436][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.017323][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.119527][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.138313][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.227736][T14376] fuse: Unknown parameter 'group_i00000000000000000000' [ 908.420631][T14381] syz_tun: entered allmulticast mode [ 908.500353][T14381] dvmrp8: entered allmulticast mode [ 908.541868][T14380] syz_tun: left allmulticast mode [ 910.530600][T14401] dummy0: entered promiscuous mode [ 910.552175][T14401] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 910.580115][T14401] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 910.590959][T14401] Cannot create hsr debugfs directory [ 910.621865][T14401] hsr1: entered allmulticast mode [ 910.643124][T14401] dummy0: entered allmulticast mode [ 910.649563][T14407] fuse: Unknown parameter 'group_i00000000000000000000' [ 910.652635][T14401] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 910.671147][T14395] virt_wifi0 speed is unknown, defaulting to 1000 [ 912.412749][T14431] fuse: Bad value for 'fd' [ 913.380727][T14442] fuse: Unknown parameter 'group_i00000000000000000000' [ 913.874062][T14458] fuse: Bad value for 'fd' [ 915.325432][T14466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.363303][T14466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.446734][T14468] fuse: Unknown parameter 'group_id00000000000000000000' [ 917.906761][T14498] fuse: Unknown parameter 'group_id00000000000000000000' [ 919.335860][T14506] fuse: Bad value for 'fd' [ 921.863625][T14524] fuse: Bad value for 'fd' [ 926.090124][T11586] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 180 seconds [ 926.102110][T11586] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 180 seconds [ 926.114378][T11586] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 180 seconds [ 926.125575][T11586] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 180 seconds [ 926.178248][T14550] fuse: Unknown parameter 'group_id00000000000000000000' [ 926.272884][ T8] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 926.638795][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 926.662386][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.682865][ T8] usb 3-1: Product: syz [ 926.687141][ T8] usb 3-1: Manufacturer: syz [ 926.691755][ T8] usb 3-1: SerialNumber: syz [ 927.974690][ T8] usb 3-1: config 0 descriptor?? [ 928.286634][ T28] audit: type=1804 audit(1774986015.655:23): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2635" name="/newroot/33/file1" dev="fuse" ino=1 res=1 errno=0 [ 928.393297][ T8] usb 3-1: can't set config #0, error -71 [ 928.433440][ T8] usb 3-1: USB disconnect, device number 126 [ 928.479044][ T28] audit: type=1800 audit(1774986015.655:24): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2635" name="/" dev="fuse" ino=1 res=0 errno=0 [ 928.604182][ T28] audit: type=1800 audit(1774986015.655:25): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2635" name="/" dev="fuse" ino=1 res=0 errno=0 [ 928.624103][ C1] vkms_vblank_simulate: vblank timer overrun [ 928.661678][T14562] fuse: Bad value for 'group_id' [ 928.808406][T14566] fuse: Bad value for 'fd' [ 931.758931][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.765947][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.086884][T14592] fuse: Bad value for 'user_id' [ 932.288900][ T5770] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 934.948662][ T5803] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 935.252320][ T5803] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 935.272931][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.280959][ T5803] usb 1-1: Product: syz [ 935.302998][ T5803] usb 1-1: Manufacturer: syz [ 935.307624][ T5803] usb 1-1: SerialNumber: syz [ 935.363929][ T5803] usb 1-1: config 0 descriptor?? [ 935.393098][ T5803] usb 1-1: can't set config #0, error -71 [ 935.404734][ T5803] usb 1-1: USB disconnect, device number 46 [ 935.457338][T14609] fuse: Bad value for 'fd' [ 937.321990][T14628] fuse: Bad value for 'user_id' [ 938.962992][ T5770] Bluetooth: hci2: command 0x0406 tx timeout [ 939.563543][T10281] IPVS: ip_vs_send_async error -19 [ 942.151742][T11976] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 942.261617][T14664] fuse: Bad value for 'fd' [ 943.023419][T14656] virt_wifi0 speed is unknown, defaulting to 1000 [ 943.228685][T11976] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 943.248251][T11976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.283058][T11976] usb 3-1: Product: syz [ 943.297448][T11976] usb 3-1: Manufacturer: syz [ 943.302043][T11976] usb 3-1: SerialNumber: syz [ 943.350277][T11976] usb 3-1: config 0 descriptor?? [ 943.484920][T11976] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 943.512958][T11976] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 943.555344][T11976] usb 3-1: USB disconnect, device number 127 [ 944.672753][T14676] fuse: Bad value for 'user_id' [ 948.378306][ T28] audit: type=1804 audit(1774986033.775:26): pid=14695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2666" name="/newroot/69/file1" dev="fuse" ino=1 res=1 errno=0 [ 948.504934][ T28] audit: type=1800 audit(1774986033.775:27): pid=14695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2666" name="/" dev="fuse" ino=1 res=0 errno=0 [ 948.526791][ T28] audit: type=1800 audit(1774986033.785:28): pid=14695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2666" name="/" dev="fuse" ino=1 res=0 errno=0 [ 948.690917][T14702] fuse: Bad value for 'fd' [ 949.946500][T14711] virt_wifi0 speed is unknown, defaulting to 1000 [ 951.335663][T14727] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 951.547798][T14727] CIFS mount error: No usable UNC path provided in device string! [ 951.547798][T14727] [ 951.565630][T14732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.582187][T14727] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 951.591525][T14732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.844930][ T28] audit: type=1804 audit(1774986040.225:29): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2677" name="/newroot/24/file1" dev="fuse" ino=1 res=1 errno=0 [ 952.900444][ T28] audit: type=1800 audit(1774986040.225:30): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2677" name="/" dev="fuse" ino=1 res=0 errno=0 [ 952.980560][ T28] audit: type=1800 audit(1774986040.225:31): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2677" name="/" dev="fuse" ino=1 res=0 errno=0 [ 953.593014][T14752] fuse: Bad value for 'fd' [ 956.613021][ T5823] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 956.803457][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 956.971052][T11586] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 210 seconds [ 956.982070][T11586] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 210 seconds [ 956.993390][T11586] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 210 seconds [ 957.213631][T14768] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 957.320847][T11586] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 210 seconds [ 957.512646][ T5823] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.533042][ T5823] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.604760][ T5823] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 957.618649][ T5823] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 957.631617][ T5823] usb 2-1: Product: syz [ 957.663386][ T5823] usb 2-1: Manufacturer: syz [ 957.700442][ T5823] hub 2-1:4.0: USB hub found [ 958.153049][ T5823] hub 2-1:4.0: 2 ports detected [ 958.850175][ T28] audit: type=1804 audit(1774986046.225:32): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2687" name="/newroot/132/file1" dev="fuse" ino=1 res=1 errno=0 [ 958.876856][ T28] audit: type=1800 audit(1774986046.225:33): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2687" name="/" dev="fuse" ino=1 res=0 errno=0 [ 958.899794][ T28] audit: type=1800 audit(1774986046.225:34): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2687" name="/" dev="fuse" ino=1 res=0 errno=0 [ 959.918531][T14761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.003746][T14761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.966828][ T5823] hub 2-1:4.0: hub_ext_port_status failed (err = -32) [ 962.484381][ T5823] usb 2-1: USB disconnect, device number 6 [ 965.944401][T14812] fuse: Bad value for 'fd' [ 967.991345][ T28] audit: type=1804 audit(1774986055.365:35): pid=14831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2698" name="/newroot/28/file1" dev="fuse" ino=1 res=1 errno=0 [ 968.272446][ T28] audit: type=1800 audit(1774986055.365:36): pid=14831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2698" name="/" dev="fuse" ino=1 res=0 errno=0 [ 968.601177][ T28] audit: type=1800 audit(1774986055.365:37): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2698" name="/" dev="fuse" ino=1 res=0 errno=0 [ 968.641455][ T28] audit: type=1804 audit(1774986055.635:38): pid=14828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2699" name="/newroot/54/file1" dev="fuse" ino=1 res=1 errno=0 [ 968.693108][ T28] audit: type=1800 audit(1774986055.635:39): pid=14828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2699" name="/" dev="fuse" ino=1 res=0 errno=0 [ 970.240002][ T28] audit: type=1800 audit(1774986055.635:40): pid=14828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2699" name="/" dev="fuse" ino=1 res=0 errno=0 [ 971.061621][T14843] dummy0: entered promiscuous mode [ 971.312212][T14843] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 971.386861][T14843] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 971.436859][T14843] Cannot create hsr debugfs directory [ 971.442402][T14843] hsr1: entered allmulticast mode [ 972.578860][T14843] dummy0: entered allmulticast mode [ 972.686708][T14843] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 973.577485][T14852] fuse: Bad value for 'fd' [ 977.996103][ T28] audit: type=1804 audit(1774986065.375:41): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2711" name="/newroot/140/file1" dev="fuse" ino=1 res=1 errno=0 [ 978.234126][ T28] audit: type=1800 audit(1774986065.375:42): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2711" name="/" dev="fuse" ino=1 res=0 errno=0 [ 978.476904][ T28] audit: type=1800 audit(1774986065.375:43): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2711" name="/" dev="fuse" ino=1 res=0 errno=0 [ 979.445328][ T28] audit: type=1804 audit(1774986066.825:44): pid=14884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2713" name="/newroot/142/file1" dev="fuse" ino=1 res=1 errno=0 [ 979.487253][ T28] audit: type=1800 audit(1774986066.825:45): pid=14884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2713" name="/" dev="fuse" ino=1 res=0 errno=0 [ 979.529177][ T28] audit: type=1800 audit(1774986066.825:46): pid=14882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2713" name="/" dev="fuse" ino=1 res=0 errno=0 [ 979.809248][T12507] Bluetooth: hci0: command 0x0406 tx timeout [ 981.822929][T14898] fuse: Bad value for 'fd' [ 981.833883][T14888] dummy0: entered promiscuous mode [ 982.051553][T14888] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 982.708063][T14888] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 982.855693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.880691][T14888] Cannot create hsr debugfs directory [ 982.944384][T14888] hsr1: entered allmulticast mode [ 982.976851][T14888] dummy0: entered allmulticast mode [ 982.982073][T14888] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 983.810684][ T28] audit: type=1804 audit(1774986071.185:47): pid=14909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2720" name="/newroot/78/file1" dev="fuse" ino=1 res=1 errno=0 [ 984.533295][ T28] audit: type=1800 audit(1774986071.185:48): pid=14909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2720" name="/" dev="fuse" ino=1 res=0 errno=0 [ 984.603157][ T28] audit: type=1800 audit(1774986071.185:49): pid=14909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2720" name="/" dev="fuse" ino=1 res=0 errno=0 [ 985.306062][ T28] audit: type=1804 audit(1774986072.505:50): pid=14918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2724" name="/newroot/145/file1" dev="fuse" ino=1 res=1 errno=0 [ 986.240986][ T28] audit: type=1800 audit(1774986072.505:51): pid=14918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2724" name="/" dev="fuse" ino=1 res=0 errno=0 [ 986.291943][ T28] audit: type=1800 audit(1774986072.505:52): pid=14916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2724" name="/" dev="fuse" ino=1 res=0 errno=0 [ 986.483003][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 986.647754][T14931] fuse: Bad value for 'fd' [ 986.833330][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 986.856224][ T9] usb 1-1: config 0 has no interfaces? [ 986.872027][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 986.912875][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.935856][ T9] usb 1-1: config 0 descriptor?? [ 987.264369][ T28] audit: type=1804 audit(1774986074.635:53): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2729" name="/newroot/82/file1" dev="fuse" ino=1 res=1 errno=0 [ 987.915008][T11586] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 240 seconds [ 987.928130][T11586] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 240 seconds [ 987.939343][T11586] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 240 seconds [ 987.996053][T11586] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 240 seconds [ 988.028328][ T5921] usb 1-1: USB disconnect, device number 47 [ 988.056458][ T28] audit: type=1800 audit(1774986074.635:54): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2729" name="/" dev="fuse" ino=1 res=0 errno=0 [ 988.231935][ T28] audit: type=1800 audit(1774986074.645:55): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2729" name="/" dev="fuse" ino=1 res=0 errno=0 [ 991.213071][ T5139] udevd[5139]: worker [12381] /devices/virtual/block/nbd0 timeout; kill it [ 991.803453][ T5139] udevd[5139]: seq 19246 '/devices/virtual/block/nbd0' killed [ 993.090231][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.096714][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.694839][ T28] audit: type=1804 audit(1774986082.075:56): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2736" name="/newroot/64/file1" dev="fuse" ino=1 res=1 errno=0 [ 994.786656][ T28] audit: type=1800 audit(1774986082.075:57): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2736" name="/" dev="fuse" ino=1 res=0 errno=0 [ 994.902864][ T28] audit: type=1800 audit(1774986082.075:58): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2736" name="/" dev="fuse" ino=1 res=0 errno=0 [ 995.625784][ T28] audit: type=1804 audit(1774986082.995:59): pid=14985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2738" name="/newroot/148/file1" dev="fuse" ino=1 res=1 errno=0 [ 996.010758][ T28] audit: type=1800 audit(1774986082.995:60): pid=14985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2738" name="/" dev="fuse" ino=1 res=0 errno=0 [ 996.031160][ T28] audit: type=1800 audit(1774986082.995:61): pid=14983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2738" name="/" dev="fuse" ino=1 res=0 errno=0 [ 997.525090][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2740'. [ 998.671680][T14999] fuse: Bad value for 'fd' [ 1000.362911][T14994] Bluetooth: hci1: command 0x0406 tx timeout [ 1003.259577][T14989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.267194][T14989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.313725][T15013] kAFS: No cell specified [ 1005.090131][ T28] audit: type=1804 audit(1774986092.395:62): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2747" name="/newroot/68/file1" dev="fuse" ino=1 res=1 errno=0 [ 1005.160002][ T28] audit: type=1800 audit(1774986092.395:63): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2747" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1005.222888][ T28] audit: type=1800 audit(1774986092.395:64): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2747" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1008.701802][T14994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1008.711884][T14994] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1008.750574][T14994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1008.758579][T14994] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1008.766427][T14994] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1008.774100][T14994] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1008.801396][T14989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.011620][T14989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.054008][T15035] fuse: Bad value for 'fd' [ 1010.843374][T14994] Bluetooth: hci3: command tx timeout [ 1012.443189][T11976] usb 4-1: USB disconnect, device number 57 [ 1012.612144][T14989] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.642574][T14989] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.662850][ T28] audit: type=1804 audit(1774986100.035:65): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2756" name="/newroot/73/file1" dev="fuse" ino=1 res=1 errno=0 [ 1012.757760][T14989] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.783202][ T28] audit: type=1800 audit(1774986100.035:66): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2756" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1012.828786][ T28] audit: type=1800 audit(1774986100.035:67): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2756" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1012.832930][T14989] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.926761][T14994] Bluetooth: hci3: command tx timeout [ 1013.206023][ T5770] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1013.216965][ T5770] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1013.238755][ T5770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1013.265147][ T5770] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1013.278654][ T5770] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1013.287082][ T5770] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1013.423012][T15061] fuse: Unknown parameter '0x0000000000000004' [ 1014.036540][T14989] hsr1: left allmulticast mode [ 1014.041429][T14989] dummy0: left allmulticast mode [ 1014.054071][T14989] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1014.246279][T15032] virt_wifi0 speed is unknown, defaulting to 1000 [ 1014.286819][T15058] virt_wifi0 speed is unknown, defaulting to 1000 [ 1015.032086][T14994] Bluetooth: hci3: command tx timeout [ 1015.322910][T14994] Bluetooth: hci5: command tx timeout [ 1016.155598][ T1085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.240732][T15058] chnl_net:caif_netlink_parms(): no params data found [ 1016.341382][T15032] chnl_net:caif_netlink_parms(): no params data found [ 1016.493106][ T1085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.826460][ T1085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.712866][T14994] Bluetooth: hci3: command tx timeout [ 1017.713192][ T5770] Bluetooth: hci5: command tx timeout [ 1018.566072][T11586] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 270 seconds [ 1018.577643][T11586] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 270 seconds [ 1018.588784][T11586] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 270 seconds [ 1018.600060][T11586] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 270 seconds [ 1018.851356][ T1085] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1018.903063][ T1085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.084808][T15032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.092066][T15032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.099742][T15032] bridge_slave_0: entered allmulticast mode [ 1019.107436][T15032] bridge_slave_0: entered promiscuous mode [ 1019.121053][T15032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.132909][T15032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.140195][T15032] bridge_slave_1: entered allmulticast mode [ 1019.148174][T15032] bridge_slave_1: entered promiscuous mode [ 1019.255905][T15058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.312092][T15058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.333639][T15058] bridge_slave_0: entered allmulticast mode [ 1019.353261][T15058] bridge_slave_0: entered promiscuous mode [ 1019.412437][T15058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.423002][T15058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.443142][T15058] bridge_slave_1: entered allmulticast mode [ 1019.450605][T15058] bridge_slave_1: entered promiscuous mode [ 1019.576645][T15032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.651436][T15058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.700394][T15032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.763159][T15058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.816587][ T5770] Bluetooth: hci5: command tx timeout [ 1020.039883][T15058] team0: Port device team_slave_0 added [ 1020.109735][T15032] team0: Port device team_slave_0 added [ 1020.126473][T15032] team0: Port device team_slave_1 added [ 1020.186113][T15058] team0: Port device team_slave_1 added [ 1020.345061][T15032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.352036][T15032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.422880][T15032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.445037][T15032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.452053][T15032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.513086][T15032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.561869][T15058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.570409][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.613088][T15058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.686683][T15058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.723484][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.793783][T15058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.989063][T15032] hsr_slave_0: entered promiscuous mode [ 1021.071481][T15032] hsr_slave_1: entered promiscuous mode [ 1021.184886][T15032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1021.192586][T15032] Cannot create hsr debugfs directory [ 1021.939140][ T5770] Bluetooth: hci5: command tx timeout [ 1022.023163][ T28] audit: type=1804 audit(1774986109.205:68): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2763" name="/newroot/77/file1" dev="fuse" ino=1 res=1 errno=0 [ 1022.530562][ T28] audit: type=1800 audit(1774986109.205:69): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2763" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1022.652957][ T28] audit: type=1800 audit(1774986109.215:70): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2763" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1022.742203][T15058] hsr_slave_0: entered promiscuous mode [ 1022.762755][T15058] hsr_slave_1: entered promiscuous mode [ 1022.792951][T15058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.800562][T15058] Cannot create hsr debugfs directory [ 1026.734946][T15058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1026.834412][T15058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1026.964209][T15058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1027.026834][T15058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1027.888406][ T28] audit: type=1804 audit(1774986115.265:71): pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2770" name="/newroot/80/file1" dev="fuse" ino=1 res=1 errno=0 [ 1027.992691][ T28] audit: type=1800 audit(1774986115.265:72): pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2770" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1028.020580][ T28] audit: type=1800 audit(1774986115.265:73): pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2770" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1028.042615][T15032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1028.504359][T15032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1028.696039][T15032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1028.982835][T15032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1029.432586][ T1085] dummy0: left promiscuous mode [ 1029.459311][ T1085] hsr_slave_0: left promiscuous mode [ 1029.473054][ T1085] hsr_slave_1: left promiscuous mode [ 1029.627751][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.690783][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.519998][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.552018][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.590498][ T1085] bridge_slave_1: left allmulticast mode [ 1030.633154][ T1085] bridge_slave_1: left promiscuous mode [ 1030.638974][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.731386][ T1085] bridge_slave_0: left allmulticast mode [ 1030.756184][ T1085] bridge_slave_0: left promiscuous mode [ 1030.818249][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.043504][ T1085] veth1_macvtap: left promiscuous mode [ 1031.049062][ T1085] veth0_macvtap: left promiscuous mode [ 1031.083190][ T1085] veth1_vlan: left promiscuous mode [ 1031.088651][ T1085] veth0_vlan: left promiscuous mode [ 1031.779389][T15180] kAFS: No cell specified [ 1032.793652][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 1032.893275][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 1032.972965][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.080580][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.901038][ T1085] bond0 (unregistering): Released all slaves [ 1035.137322][T15058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.179720][T15058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.214604][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.221738][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.261772][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.268944][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.299773][T15032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.398812][T15032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.483802][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.491078][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.542732][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.550027][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.678417][T15032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1035.697998][T15032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1036.345185][T15058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.608772][ T1085] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1036.698032][T15032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.114602][ T1085] tipc: Left network mode [ 1037.392118][T15224] fuse: Bad value for 'fd' [ 1038.197136][T15058] veth0_vlan: entered promiscuous mode [ 1038.245002][T15058] veth1_vlan: entered promiscuous mode [ 1038.429947][T15032] veth0_vlan: entered promiscuous mode [ 1038.478753][T15032] veth1_vlan: entered promiscuous mode [ 1038.492317][T15058] veth0_macvtap: entered promiscuous mode [ 1038.538065][T15058] veth1_macvtap: entered promiscuous mode [ 1038.573945][T15032] veth0_macvtap: entered promiscuous mode [ 1038.811562][T15032] veth1_macvtap: entered promiscuous mode [ 1039.031461][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.058004][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.078756][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.097764][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.114895][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.125583][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.137265][T15058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.147285][ T1085] IPVS: stopping master sync thread 13096 ... [ 1039.159270][T15032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.339469][T15032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.483060][T15032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.514074][T15032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.531514][T15032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.612839][T15032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.622694][T15032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.644103][T15032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.667108][T15032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.701557][T15259] fuse: Bad value for 'fd' [ 1041.288399][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.362930][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.406192][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.429590][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.457606][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.477507][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.501051][T15058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.609784][T15032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.650182][T15032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.672886][T15032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.696007][T15032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.706283][T15032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.729367][T15032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.750405][T15032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.762308][T15032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.780336][T15032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.797419][T15032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.842354][T15032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.881542][T15032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.892139][T15032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.010749][T15271] fuse: Unknown parameter '0x0000000000000004' [ 1042.090707][T15058] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.206082][T15058] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.371442][T15058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.416012][T15058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.621964][ T1085] dummy0: left promiscuous mode [ 1042.642446][ T1085] hsr_slave_0: left promiscuous mode [ 1042.653243][ T1085] hsr_slave_1: left promiscuous mode [ 1042.659400][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.675516][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.695083][ T1085] bridge_slave_1: left allmulticast mode [ 1042.700765][ T1085] bridge_slave_1: left promiscuous mode [ 1042.708362][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.728807][ T1085] bridge_slave_0: left allmulticast mode [ 1042.734937][ T1085] bridge_slave_0: left promiscuous mode [ 1042.742335][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.139478][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 1044.215778][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 1044.315433][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.378786][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.815448][ T1085] bond0 (unregistering): Released all slaves [ 1044.967813][T15279] virt_wifi0 speed is unknown, defaulting to 1000 [ 1045.131354][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.139402][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.185335][ T5803] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1045.283900][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.301245][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.348683][T11838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.364178][T11838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.383539][ T5803] usb 3-1: Using ep0 maxpacket: 16 [ 1045.408669][ T5803] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.432430][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.441778][ T1085] IPVS: stop unused estimator thread 0... [ 1045.450802][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.463107][ T5803] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1045.469791][ T5803] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1045.533651][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.572420][ T5803] usb 3-1: config 0 descriptor?? [ 1045.836752][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2755'. [ 1046.102070][ T5803] nzxt-smart2 0003:1E71:2009.0033: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1047.214133][T15315] fuse: Bad value for 'fd' [ 1049.170255][T11586] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 300 seconds [ 1049.183350][T11586] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 300 seconds [ 1049.195107][T11586] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 300 seconds [ 1049.206265][T11586] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 300 seconds [ 1049.304333][ T9] usb 3-1: USB disconnect, device number 2 [ 1049.473676][T15324] fuse: Bad value for 'fd' [ 1049.770783][T15332] kAFS: No cell specified [ 1052.533212][T15363] virt_wifi0 speed is unknown, defaulting to 1000 [ 1053.328864][ T28] audit: type=1804 audit(1774986140.705:74): pid=15372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2797" name="/newroot/92/file1" dev="fuse" ino=1 res=1 errno=0 [ 1053.392012][ T28] audit: type=1800 audit(1774986140.725:75): pid=15372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2797" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1053.471785][ T28] audit: type=1800 audit(1774986140.745:76): pid=15372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2797" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1053.507618][T15373] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1053.520332][T15374] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2798'. [ 1054.549018][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.563322][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.493859][ T28] audit: type=1804 audit(1774986148.875:77): pid=15451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2814" name="/newroot/6/file1" dev="fuse" ino=1 res=1 errno=0 [ 1061.515866][ T28] audit: type=1800 audit(1774986148.875:78): pid=15451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2814" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1061.585558][ T28] audit: type=1800 audit(1774986148.895:79): pid=15451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2814" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1063.701285][T15459] syz.5.2815: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1065.206250][T15481] kAFS: No cell specified [ 1065.322944][T15459] CPU: 1 PID: 15459 Comm: syz.5.2815 Not tainted syzkaller #0 [ 1065.330550][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1065.340640][T15459] Call Trace: [ 1065.343960][T15459] [ 1065.346974][T15459] dump_stack_lvl+0x18c/0x250 [ 1065.351830][T15459] ? show_regs_print_info+0x20/0x20 [ 1065.357107][T15459] ? load_image+0x400/0x400 [ 1065.361682][T15459] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1065.368185][T15459] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1065.374751][T15459] warn_alloc+0x246/0x340 [ 1065.379173][T15459] ? zone_watermark_ok_safe+0x230/0x230 [ 1065.384781][T15459] ? _raw_spin_unlock+0x28/0x40 [ 1065.389770][T15459] ? xsk_init_queue+0xad/0x100 [ 1065.394641][T15459] __vmalloc_node_range+0x662/0x1330 [ 1065.400002][T15459] ? free_vm_area+0x50/0x50 [ 1065.404581][T15459] vmalloc_user+0x74/0x80 [ 1065.408962][T15459] ? xskq_create+0xbf/0x170 [ 1065.413500][T15459] xskq_create+0xbf/0x170 [ 1065.417962][T15459] xsk_init_queue+0xad/0x100 [ 1065.422600][T15459] xsk_setsockopt+0x42e/0x760 [ 1065.427319][T15459] ? xsk_poll+0x680/0x680 [ 1065.431688][T15459] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1065.437636][T15459] ? __fget_files+0x28/0x4b0 [ 1065.442350][T15459] ? __fget_files+0x28/0x4b0 [ 1065.447000][T15459] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1065.452593][T15459] ? security_socket_setsockopt+0x7e/0xa0 [ 1065.458372][T15459] ? xsk_poll+0x680/0x680 [ 1065.462744][T15459] do_sock_setsockopt+0x175/0x1a0 [ 1065.467876][T15459] ? __fdget+0x180/0x210 [ 1065.472164][T15459] __x64_sys_setsockopt+0x182/0x200 [ 1065.477428][T15459] do_syscall_64+0x55/0xa0 [ 1065.481898][T15459] ? clear_bhb_loop+0x40/0x90 [ 1065.486671][T15459] ? clear_bhb_loop+0x40/0x90 [ 1065.491372][T15459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1065.497295][T15459] RIP: 0033:0x7f1ad159c819 [ 1065.501713][T15459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.521318][T15459] RSP: 002b:00007f1ad2438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1065.529735][T15459] RAX: ffffffffffffffda RBX: 00007f1ad1816090 RCX: 00007f1ad159c819 [ 1065.537744][T15459] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000003 [ 1065.545746][T15459] RBP: 00007f1ad1632c91 R08: 0000000000000004 R09: 0000000000000000 [ 1065.553727][T15459] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 1065.561703][T15459] R13: 00007f1ad1816128 R14: 00007f1ad1816090 R15: 00007ffd64e5ad48 [ 1065.569687][T15459] [ 1065.851894][T15459] Mem-Info: [ 1065.912955][T15459] active_anon:27030 inactive_anon:1 isolated_anon:0 [ 1065.912955][T15459] active_file:18492 inactive_file:40335 isolated_file:0 [ 1065.912955][T15459] unevictable:768 dirty:117 writeback:0 [ 1065.912955][T15459] slab_reclaimable:11053 slab_unreclaimable:97123 [ 1065.912955][T15459] mapped:27940 shmem:22235 pagetables:661 [ 1065.912955][T15459] sec_pagetables:0 bounce:0 [ 1065.912955][T15459] kernel_misc_reclaimable:0 [ 1065.912955][T15459] free:1311345 free_pcp:13113 free_cma:0 [ 1065.972911][T15459] Node 0 active_anon:107620kB inactive_anon:4kB active_file:73932kB inactive_file:161136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111724kB dirty:468kB writeback:0kB shmem:86904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10868kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no [ 1066.158595][T15459] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1066.291779][T15459] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1066.452830][T15459] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1066.458684][T15459] Node 0 DMA32 free:1340880kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:99580kB inactive_anon:4kB active_file:73932kB inactive_file:160316kB unevictable:9236kB writepending:468kB present:3129332kB managed:2586956kB mlocked:7700kB bounce:0kB free_pcp:32300kB local_pcp:20980kB free_cma:0kB [ 1066.537261][ T5831] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1066.575572][ T5831] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1066.685570][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 1066.690400][T15459] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1066.882957][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 1066.887762][T15459] Node 1 Normal free:3888916kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20416kB local_pcp:7872kB free_cma:0kB [ 1066.993008][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1067.101703][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 1067.123006][T15459] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1067.163637][ T5831] usb 5-1: device descriptor read/64, error -71 [ 1067.180884][T15459] Node 0 DMA32: 1706*4kB (UME) 1184*8kB (UME) 1856*16kB (UME) 841*32kB (UME) 443*64kB (UME) 419*128kB (UME) 237*256kB (UME) 104*512kB (UM) 47*1024kB (UME) 15*2048kB (UME) 251*4096kB (UM) = 1375752kB [ 1067.206194][T15459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1067.227347][T15459] Node 1 Normal: 227*4kB (U) 59*8kB (UME) 49*16kB (UME) 69*32kB (UE) 8*64kB (UE) 6*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3888916kB [ 1067.255249][T15459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.285045][T15459] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1067.308355][T15459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.354549][T15459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1067.393332][T15459] 73430 total pagecache pages [ 1067.398067][T15459] 2 pages in swap cache [ 1067.410897][T15459] Free swap = 124304kB [ 1067.453723][ T5831] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1067.543048][T15459] Total swap = 124996kB [ 1067.553131][T15459] 2097051 pages RAM [ 1067.557054][T15459] 0 pages HighMem/MovableOnly [ 1067.571951][T15459] 416926 pages reserved [ 1067.576244][T15459] 0 pages cma reserved [ 1067.621412][ T5831] usb 5-1: device descriptor read/64, error -71 [ 1067.773260][ T5831] usb usb5-port1: attempt power cycle [ 1068.202887][ T5831] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1068.253576][ T5831] usb 5-1: device descriptor read/8, error -71 [ 1069.158465][T15523] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1069.313122][ T5831] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1069.386868][ T5831] usb 5-1: device descriptor read/8, error -71 [ 1070.986676][ T5831] usb usb5-port1: unable to enumerate USB device [ 1074.801877][ T966] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1075.122360][ T966] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1075.130783][ T966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.141178][ T966] usb 1-1: config 0 has no interface number 0 [ 1075.155644][ T966] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1075.175716][ T966] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1075.184918][ T966] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1075.193219][ T966] usb 1-1: Manufacturer: syz [ 1075.246616][ T966] usb 1-1: config 0 descriptor?? [ 1075.283823][ T966] hub 1-1:0.52: bad descriptor, ignoring hub [ 1075.290037][ T966] hub: probe of 1-1:0.52 failed with error -5 [ 1076.804339][ T966] usb 1-1: USB disconnect, device number 48 [ 1078.584355][ T8] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1078.633070][ T8] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1078.933547][T15596] fuse: Unknown parameter '0x0000000000000003' [ 1079.042954][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1079.223658][ T8] usb 5-1: device descriptor read/64, error -71 [ 1079.494795][T11586] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 330 seconds [ 1079.508644][T11586] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 330 seconds [ 1079.512967][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1079.522885][T11586] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 330 seconds [ 1079.539850][T11586] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 330 seconds [ 1079.833504][ T8] usb 5-1: device descriptor read/64, error -71 [ 1080.060415][T15616] syz_tun: entered allmulticast mode [ 1080.100185][T15615] syz_tun: left allmulticast mode [ 1080.180622][ T8] usb usb5-port1: attempt power cycle [ 1082.311693][T15645] fuse: Unknown parameter '0x0000000000000003' [ 1086.016531][ T5831] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1086.041663][ T5831] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1086.592966][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1086.792821][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1086.813882][ T8] usb 5-1: no configurations [ 1086.828560][ T8] usb 5-1: can't read configurations, error -22 [ 1086.911970][T15681] fuse: Unknown parameter '0x0000000000000004' [ 1087.482912][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1089.854639][T15704] fuse: Unknown parameter '0x0000000000000003' [ 1092.926436][ T5823] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1092.985365][ T5823] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1093.362930][ T5831] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1093.563314][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1093.575811][ T5831] usb 5-1: no configurations [ 1093.580549][ T5831] usb 5-1: can't read configurations, error -22 [ 1093.782954][ T5831] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1094.022882][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1094.043734][ T5831] usb 5-1: no configurations [ 1094.053031][ T5831] usb 5-1: can't read configurations, error -22 [ 1094.083239][ T5831] usb usb5-port1: attempt power cycle [ 1094.133063][T15756] kAFS: No cell specified [ 1094.543321][ T5831] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1094.593365][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1094.599124][ T5831] usb 5-1: no configurations [ 1094.605057][ T5831] usb 5-1: can't read configurations, error -22 [ 1094.883149][ T5831] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1094.979501][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1094.996054][ T5831] usb 5-1: no configurations [ 1095.021816][ T5831] usb 5-1: can't read configurations, error -22 [ 1095.045399][ T5831] usb usb5-port1: unable to enumerate USB device [ 1095.071630][T15766] fuse: Unknown parameter 'fd0x0000000000000003' [ 1097.928218][T15795] fuse: Unknown parameter '0x0000000000000004' [ 1099.913775][T15817] fuse: Unknown parameter 'fd0x0000000000000003' [ 1100.204040][T15823] fuse: Unknown parameter '0x0000000000000004' [ 1101.275300][T15826] dummy0: entered promiscuous mode [ 1101.301635][ T5803] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1101.411865][ T5803] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1101.533280][T15826] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1101.572837][T15826] hsr1: entered allmulticast mode [ 1101.579724][T15826] dummy0: entered allmulticast mode [ 1102.642940][ T5803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1102.872993][ T5803] usb 3-1: Using ep0 maxpacket: 32 [ 1102.880143][ T5803] usb 3-1: no configurations [ 1102.932823][ T5803] usb 3-1: can't read configurations, error -22 [ 1103.112844][ T5803] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1103.382940][ T5803] usb 3-1: Using ep0 maxpacket: 32 [ 1104.409496][ T5803] usb 3-1: device descriptor read/all, error -71 [ 1105.203604][ T5803] usb usb3-port1: attempt power cycle [ 1105.323523][T15856] fuse: Unknown parameter 'fd0x0000000000000003' [ 1108.222892][ T5803] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1108.540482][ T5803] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1108.561973][ T5803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.584266][ T5803] usb 5-1: config 0 has no interface number 0 [ 1108.591396][ T5803] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1108.612907][ T5803] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1108.621974][ T5803] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1108.651535][ T5803] usb 5-1: Manufacturer: syz [ 1108.675547][ T5803] usb 5-1: config 0 descriptor?? [ 1108.818524][ T5803] hub 5-1:0.52: bad descriptor, ignoring hub [ 1108.834893][ T5803] hub: probe of 5-1:0.52 failed with error -5 [ 1109.623538][T11586] block nbd0: Possible stuck request ffff888022078000: control (read@0,1024B). Runtime 360 seconds [ 1109.634345][T11586] block nbd0: Possible stuck request ffff888022078200: control (read@1024,1024B). Runtime 360 seconds [ 1109.645800][T11586] block nbd0: Possible stuck request ffff888022078400: control (read@2048,1024B). Runtime 360 seconds [ 1109.656979][T11586] block nbd0: Possible stuck request ffff888022078600: control (read@3072,1024B). Runtime 360 seconds [ 1110.451538][ T5803] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1110.574168][ T5803] synaptics_usb: probe of 5-1:0.52 failed with error -71 [ 1110.656229][ T5803] usb 5-1: USB disconnect, device number 15 [ 1111.536207][ T9] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1111.655245][ T9] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1114.173059][ T966] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1114.403108][ T966] usb 6-1: Using ep0 maxpacket: 32 [ 1114.434903][ T966] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.445690][ T966] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1114.545709][ T966] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1114.562061][ T966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.577002][ T966] usb 6-1: Product: syz [ 1114.581292][ T966] usb 6-1: Manufacturer: syz [ 1114.591080][ T966] usb 6-1: SerialNumber: syz [ 1114.648875][ T966] usb 6-1: config 0 descriptor?? [ 1115.969223][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.975705][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.268110][ T28] audit: type=1804 audit(1774986203.645:80): pid=15947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2904" name="/newroot/116/file1" dev="fuse" ino=1 res=1 errno=0 [ 1116.387842][ T28] audit: type=1800 audit(1774986203.645:81): pid=15947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2904" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1116.462729][ T28] audit: type=1800 audit(1774986203.645:82): pid=15947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2904" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1116.632039][T15964] tc_dump_action: action bad kind [ 1116.678611][ T966] usb 6-1: USB disconnect, device number 2 [ 1118.031808][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2910'. [ 1118.084097][T15978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2910'. [ 1121.500698][T16004] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1122.771680][ T28] audit: type=1804 audit(1774986210.135:83): pid=16025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2914" name="/newroot/90/file1" dev="fuse" ino=1 res=1 errno=0 [ 1123.159869][ T28] audit: type=1800 audit(1774986210.135:84): pid=16025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2914" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1123.292435][ T28] audit: type=1800 audit(1774986210.135:85): pid=16025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2914" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1123.883402][ T5803] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1124.136055][ T5803] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1124.804360][T16041] capability: warning: `syz.0.2920' uses deprecated v2 capabilities in a way that may be insecure [ 1126.934089][ T966] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1130.138789][T16099] tc_dump_action: action bad kind [ 1131.634912][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 1131.644866][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 1131.657759][T16116] [U]  [ 1133.922100][T12507] Bluetooth: hci3: command 0x0406 tx timeout [ 1135.653822][T16137] fuse: Unknown parameter '0x0000000000000004' [ 1137.556612][ T29] INFO: task udevd:12381 blocked for more than 144 seconds. [ 1137.592794][ T29] Not tainted syzkaller #0 [ 1137.597865][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1137.675987][ T29] task:udevd state:D stack:24808 pid:12381 ppid:5139 flags:0x00004006 [ 1137.732121][ T29] Call Trace: [ 1137.761357][ T29] [ 1137.779066][ T29] __schedule+0x1553/0x45a0 [ 1137.804331][ T29] ? asan.module_dtor+0x20/0x20 [ 1137.809243][ T29] ? mark_lock+0x94/0x320 [ 1137.842757][ T29] ? lock_chain_count+0x20/0x20 [ 1137.856508][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1137.872049][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1137.889817][ T29] schedule+0xbd/0x170 [ 1137.905774][ T29] io_schedule+0x80/0xd0 [ 1137.921480][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1137.934512][ T29] ? folio_wait_bit+0x30/0x30 [ 1137.949441][ T29] ? _compound_head+0x120/0x120 [ 1137.954480][ T29] ? filemap_add_folio+0x192/0x3c0 [ 1137.964983][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 1137.982849][ T29] ? blkdev_writepage+0x30/0x30 [ 1137.997954][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 1138.013935][ T29] ? blkdev_writepage+0x30/0x30 [ 1138.031937][ T29] read_part_sector+0xd2/0x340 [ 1138.067928][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 1138.087606][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 1138.103206][ T29] ? put_partition+0x370/0x370 [ 1138.112634][ T29] ? alloc_pages+0x4dc/0x740 [ 1138.123040][ T29] bdev_disk_changed+0x740/0x1420 [ 1138.130884][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 1138.151836][ T29] ? iput+0x343/0x920 [ 1138.159805][ T29] blkdev_get_whole+0x30d/0x390 [ 1138.169977][ T29] blkdev_get_by_dev+0x279/0x600 [ 1138.187883][ T29] blkdev_open+0x152/0x360 [ 1138.198620][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 1138.212828][ T29] do_dentry_open+0x8c6/0x1500 [ 1138.226377][ T29] path_openat+0x27f1/0x3230 [ 1138.240480][ T29] ? do_sys_openat2+0xda/0x1d0 [ 1138.253612][ T9] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1138.269511][ T29] ? verify_lock_unused+0x140/0x140 [ 1138.285541][ T9] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1138.300736][ T29] ? do_filp_open+0x430/0x430 [ 1138.315191][ T29] ? __virt_addr_valid+0x18c/0x540 [ 1138.338067][ T29] do_filp_open+0x1f5/0x430 [ 1138.343638][ T29] ? vfs_tmpfile+0x490/0x490 [ 1138.348357][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1138.358451][ T29] ? alloc_fd+0x58f/0x630 [ 1138.364573][ T29] do_sys_openat2+0x134/0x1d0 [ 1138.375407][ T29] ? do_sys_open+0xe0/0xe0 [ 1138.388488][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1138.414108][ T29] ? lock_chain_count+0x20/0x20 [ 1138.424612][ T29] __x64_sys_openat+0x139/0x160 [ 1138.435205][ T29] do_syscall_64+0x55/0xa0 [ 1138.446361][ T29] ? clear_bhb_loop+0x40/0x90 [ 1138.455672][ T29] ? clear_bhb_loop+0x40/0x90 [ 1138.474764][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1138.483657][ T29] RIP: 0033:0x7fe50cca7407 [ 1138.488214][ T29] RSP: 002b:00007ffc217e1900 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1138.497079][ T29] RAX: ffffffffffffffda RBX: 00007fe50d38d880 RCX: 00007fe50cca7407 [ 1138.505447][ T29] RDX: 00000000000a0800 RSI: 000055638cbca1d0 RDI: ffffffffffffff9c [ 1138.514331][ T29] RBP: 000055638cbaf910 R08: 0000000000000000 R09: 0000000000000000 [ 1138.523063][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055638cbd29d0 [ 1138.532021][ T29] R13: 000055638cbc7410 R14: 0000000000000000 R15: 000055638cbd29d0 [ 1138.548555][ T29] [ 1138.562926][ T29] [ 1138.562926][ T29] Showing all locks held in the system: [ 1138.574692][ T29] 6 locks held by kworker/0:1/9: [ 1138.579680][ T29] #0: ffff888147a6c138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1138.600868][ T29] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1138.619506][ T29] #2: ffff888143f6a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 [ 1138.679720][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1138.732890][ T29] #3: ffff888025489508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21d0/0x49f0 [ 1138.782928][ T29] #4: ffff88814166e168 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21f8/0x49f0 [ 1138.823447][ T29] #5: ffffffff8dcc8c50 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x164/0x1730 [ 1138.864593][ T29] 1 lock held by khungtaskd/29: [ 1138.869489][ T29] #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1138.922896][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1138.937763][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.952610][ T29] 2 locks held by getty/5533: [ 1138.953839][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1138.989092][ T9] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1139.010374][ T29] #0: ffff88802d50c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1139.011640][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.056121][ T9] usb 5-1: Product: syz [ 1139.060427][ T9] usb 5-1: Manufacturer: syz [ 1139.070097][ T9] usb 5-1: SerialNumber: syz [ 1139.077208][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1139.089086][ T9] usb 5-1: config 0 descriptor?? [ 1139.101275][ T29] 1 lock held by udevd/12381: [ 1139.118151][ T29] #0: ffff8880220134c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1139.132513][ T29] 1 lock held by syz.0.2940/16158: [ 1139.137886][ T29] #0: ffffffff8d137940 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 1139.160039][ T29] 1 lock held by syz.5.2942/16154: [ 1139.175623][ T29] #0: ffff8880268814a0 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x166/0x3f0 [ 1139.192912][ T29] 4 locks held by syz.5.2942/16156: [ 1139.215683][ T29] 2 locks held by syz.5.2942/16157: [ 1139.242537][ T29] 1 lock held by sed/16175: [ 1139.255202][ T29] [ 1139.258958][ T29] ============================================= [ 1139.258958][ T29] [ 1139.272064][ T29] NMI backtrace for cpu 0 [ 1139.276421][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1139.283651][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.293759][ T29] Call Trace: [ 1139.297069][ T29] [ 1139.300035][ T29] dump_stack_lvl+0x18c/0x250 [ 1139.304749][ T29] ? show_regs_print_info+0x20/0x20 [ 1139.309957][ T29] ? load_image+0x400/0x400 [ 1139.314469][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1139.319427][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1139.325583][ T29] ? _printk+0xde/0x130 [ 1139.329746][ T29] ? load_image+0x400/0x400 [ 1139.334280][ T29] ? load_image+0x400/0x400 [ 1139.338792][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1139.344866][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1139.350855][ T29] watchdog+0xf3d/0xf80 [ 1139.355034][ T29] ? watchdog+0x1e1/0xf80 [ 1139.359400][ T29] kthread+0x2fa/0x390 [ 1139.363486][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1139.368527][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1139.373127][ T29] ret_from_fork+0x48/0x80 [ 1139.377570][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1139.382187][ T29] ret_from_fork_asm+0x11/0x20 [ 1139.386991][ T29] [ 1139.390798][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1139.396165][ C1] NMI backtrace for cpu 1 [ 1139.396176][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1139.396192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.396203][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1139.396285][ C1] Code: 6f 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 39 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1139.396300][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1139.396315][ C1] RAX: 37b6f39323015400 RBX: ffffffff8162a8c1 RCX: 37b6f39323015400 [ 1139.396329][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 1139.396342][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 1139.396355][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 1139.396368][ C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000 [ 1139.396380][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1139.396396][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1139.396408][ C1] CR2: 00007f08a7702fe8 CR3: 00000000768be000 CR4: 00000000003526e0 [ 1139.396423][ C1] Call Trace: [ 1139.396442][ C1] [ 1139.396447][ C1] default_idle+0x13/0x20 [ 1139.396467][ C1] default_idle_call+0x6c/0xa0 [ 1139.396489][ C1] do_idle+0x221/0x590 [ 1139.396512][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1139.396531][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1139.396550][ C1] ? asm_sysvec_error_interrupt+0x11/0x20 [ 1139.396579][ C1] cpu_startup_entry+0x43/0x60 [ 1139.396598][ C1] start_secondary+0xee/0xf0 [ 1139.396617][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1139.396647][ C1] [ 1139.666671][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1139.673560][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1139.680797][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.690901][ T29] Call Trace: [ 1139.694203][ T29] [ 1139.697142][ T29] dump_stack_lvl+0x18c/0x250 [ 1139.701854][ T29] ? show_regs_print_info+0x20/0x20 [ 1139.707067][ T29] ? load_image+0x400/0x400 [ 1139.711588][ T29] panic+0x2dc/0x730 [ 1139.715495][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1139.721203][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1139.725725][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1139.731282][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1139.737704][ T29] watchdog+0xf7c/0xf80 [ 1139.741871][ T29] ? watchdog+0x1e1/0xf80 [ 1139.746214][ T29] kthread+0x2fa/0x390 [ 1139.750290][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1139.755326][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1139.759944][ T29] ret_from_fork+0x48/0x80 [ 1139.764373][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1139.768977][ T29] ret_from_fork_asm+0x11/0x20 [ 1139.773772][ T29] [ 1139.777423][ T29] Kernel Offset: disabled [ 1139.781781][ T29] Rebooting in 86400 seconds..