last executing test programs: 13m42.256415871s ago: executing program 4 (id=665): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000400000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13m40.369741767s ago: executing program 4 (id=668): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x19, r1, 0x1, 0x49, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) sendmmsg$sock(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}, {{&(0x7f0000000680)=@nl=@proc={0x10, 0x0, 0x25dfdbf8, 0x80}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)="e313c7c645abb248d1bd67b75f0dee38d2a4e146dcdefc560a6952936df0a8029fe793d71edce445fcf49e05da6d92808dfc94c9858f837d81a02b928de21f6b35721523ecab4e8e55d6b0e99bd6", 0x4e}, {&(0x7f00000007c0)="ac395b9fe50ddf80b15d029e0f9a48402ebe278e6466486e098a8f", 0x1b}], 0x2}}], 0x2, 0x20020000) 13m40.128612237s ago: executing program 4 (id=669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 13m38.971301985s ago: executing program 4 (id=676): socket$l2tp6(0xa, 0x2, 0x73) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 13m37.582712292s ago: executing program 4 (id=679): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x2cb5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 13m36.636977451s ago: executing program 4 (id=682): io_setup(0x6, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r5 = getpid() syz_pidfd_open(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x10, 0x10, 0x7, 0xe, {{0x6, 0x4, 0x0, 0xf, 0x18, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @loopback, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a40)={'erspan0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x8, 0x40, 0xc, 0x2, {{0x39, 0x4, 0x2, 0xb, 0xe4, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x24, 0x98, 0x0, 0x6, [0x0, 0x8, 0x6430, 0x0, 0x4, 0x5, 0x8c, 0xbd0]}, @noop, @rr={0x7, 0x27, 0xe8, [@loopback, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @local, @rand_addr=0x64010101, @remote, @broadcast, @private=0xa010101]}, @rr={0x7, 0x7, 0x3b, [@loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xd, 0x1, 0x3, [{@empty, 0x66ec}, {@broadcast, 0x5}, {@multicast1, 0x4}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x17}, {@private=0xa010100, 0xfffffffc}, {@loopback, 0x2}]}, @lsrr={0x83, 0x17, 0xe9, [@multicast1, @broadcast, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_prespec={0x44, 0x24, 0xa5, 0x3, 0x7, [{@multicast2, 0x9}, {@multicast2, 0x6}, {@multicast1, 0x8}, {@multicast1, 0xc6}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000d80)={0x80, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x95}, 0x800) 13m21.585452693s ago: executing program 32 (id=682): io_setup(0x6, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r5 = getpid() syz_pidfd_open(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x10, 0x10, 0x7, 0xe, {{0x6, 0x4, 0x0, 0xf, 0x18, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @loopback, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a40)={'erspan0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x8, 0x40, 0xc, 0x2, {{0x39, 0x4, 0x2, 0xb, 0xe4, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x24, 0x98, 0x0, 0x6, [0x0, 0x8, 0x6430, 0x0, 0x4, 0x5, 0x8c, 0xbd0]}, @noop, @rr={0x7, 0x27, 0xe8, [@loopback, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @local, @rand_addr=0x64010101, @remote, @broadcast, @private=0xa010101]}, @rr={0x7, 0x7, 0x3b, [@loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xd, 0x1, 0x3, [{@empty, 0x66ec}, {@broadcast, 0x5}, {@multicast1, 0x4}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x17}, {@private=0xa010100, 0xfffffffc}, {@loopback, 0x2}]}, @lsrr={0x83, 0x17, 0xe9, [@multicast1, @broadcast, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_prespec={0x44, 0x24, 0xa5, 0x3, 0x7, [{@multicast2, 0x9}, {@multicast2, 0x6}, {@multicast1, 0x8}, {@multicast1, 0xc6}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000d80)={0x80, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x95}, 0x800) 7m34.185030603s ago: executing program 1 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYBLOB="0107000000000000000020"], 0x1c}}, 0x0) 7m34.140913963s ago: executing program 1 (id=1570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) syz_init_net_socket$ax25(0x3, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 7m32.042200019s ago: executing program 1 (id=1572): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000c0000000800000001000000800000009fc89c6e74f67b74338808469021321bbd7e7c01998dce8e817dd24db36c9e579dce2a0500000000000000892953bcf0eb369c15e3cfdd7c22f6e87057d37674f0007d9b41624e39fa8ecbb4317d7ab4ff6aaf8adecdb503000000557a974f2c26671a8d506f3ea84ab364f781dd56436356dc3e3afaac0ec70ec805a9eeac6b9ba16abdde6ff37d906ee38a285ea9fe6835", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2f, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0xc, 0x8, 0x9, 0xfffb, 0x100}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x27f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_collapse_huge_page_swapin\x00'}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) shutdown(r5, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 7m30.850062817s ago: executing program 1 (id=1576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x1}}, 0xe4) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) listen(r4, 0x0) 7m29.130274184s ago: executing program 1 (id=1584): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x2cb5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 7m27.817587902s ago: executing program 1 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000580), 0xffffffff, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 7m11.570748852s ago: executing program 33 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000580), 0xffffffff, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 6m49.550960562s ago: executing program 5 (id=1678): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 6m49.312071092s ago: executing program 5 (id=1680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x1}}, 0xe4) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) listen(r4, 0x0) 6m46.650433327s ago: executing program 5 (id=1684): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800000000000099, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)=0x6) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) openat$fb0(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) 6m43.225852341s ago: executing program 5 (id=1688): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) msgsnd(0x0, 0x0, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) 6m41.938471419s ago: executing program 5 (id=1692): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) futex_waitv(&(0x7f0000001700)=[{0x8ba, &(0x7f0000000180)=0xfffffffffffffff5, 0x2}, {0x7, &(0x7f00000001c0), 0x82}, {0x7, 0x0, 0x2}, {0x5, &(0x7f00000002c0)=0x2, 0x82}, {0xfffc, &(0x7f0000000340)=0x3ff, 0x2}, {0x1000000000000003, &(0x7f0000000500)=0x80000001, 0x82}, {0xe1b, 0x0, 0x2}, {0x9, &(0x7f0000000400)=0x9, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x5, &(0x7f00000004c0)=0x69b, 0x2}, {0x0, &(0x7f0000000240)=0x6, 0x2}, {0x8001, &(0x7f0000000540)=0x7, 0x82}, {0x78e55cfd, &(0x7f00000005c0)=0x1, 0x82}, {0x4, &(0x7f0000000600)=0x5, 0x82}, {0x25fa7ef3, &(0x7f0000000640)=0x9, 0x2}, {0xfff, &(0x7f00000006c0)=0x10000, 0x2}, {0xd55e, &(0x7f0000000740)=0xc, 0x82}, {0xf61b, 0x0, 0x82}, {0x80000001, &(0x7f0000000800)=0xb, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x2}, {0xffffffff, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x80, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, &(0x7f0000000d80)=0x4, 0x2}, {0x1, 0x0, 0x2}], 0x1a, 0x0, &(0x7f0000001f40), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "b4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95d83ffffa407677d18bc"}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80) 6m40.269801465s ago: executing program 5 (id=1698): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x2cb5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) 6m25.065751348s ago: executing program 34 (id=1698): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x2cb5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) 5m6.323343265s ago: executing program 2 (id=1854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) connect$unix(r1, &(0x7f0000000dc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x1, 0x0, 0x5, 0xfffffffffffffffa}, {0x2, 0x7fffffffffffffff}, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@multicast2, 0xffffffff, 0x4}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') mount$9p_fd(0x20100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) connect$unix(r5, &(0x7f0000000e40)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0xd37}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x5, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x14) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'vcan0\x00', 0x400}) socket$inet6(0xa, 0x2, 0xdf) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) syz_usb_connect(0x3, 0x1ba, &(0x7f0000000ec0)={{0x12, 0x1, 0x200, 0xa7, 0xe1, 0x5b, 0x8, 0x9c0, 0x203, 0x9b50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a8, 0x2, 0x9, 0x81, 0x28, 0x6, [{{0x9, 0x4, 0x48, 0x7f, 0x6, 0xf8, 0x9a, 0x11, 0xf1, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0xd}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x6, 0x1, "58a7af2cc4"}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x0, 0x0, "aa"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x7}]}], [{{0x9, 0x5, 0xf, 0xc, 0x32c3ea1c4eae95d, 0x7, 0x5, 0x1, [@generic={0xbc, 0x22, "f4fd5b8a98a6606287c273c5a834820f5e1e324608ebb685fab78b2f5f3a76a481651a510dc81be3968cca8ea6fc43eb898bc9f4ea3860c3b872ed75392b539e8b38758924449f368d78195466502797a7b6ae18d172eb2e9ad4ba7feccc2f6285b713a18e070a6f0622a7979df6ae0140e678d15584fa66ee0681b06a0f46b0cca42bb676872a1c514f2a1d0be2c7e5e1c8330c6f363251c828df0697bc0bbe4a81c7bdb560cba9b39b682d7d20c57d630dacb709cd056217b7"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x7, 0x9a}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x10, 0xf9, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x3d, 0x9, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x4, 0x2}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x3, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x99, 0x6}]}}]}}, {{0x9, 0x4, 0xa5, 0x4, 0x3, 0x93, 0x1b, 0x6a, 0x2, [@hid_hid={0x9, 0x21, 0x1ff, 0x8, 0x1, {0x22, 0x2a2}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xb9, 0x1, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5, 0x5, "", '?'}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x5, 0x0, "18", "d1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x4, 0x9, 0x4, 'A', "c3d3"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x7ff, 0x3, "b528"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x6, 0x6, 0x9a}}, {{0x9, 0x5, 0x6, 0x10, 0x3df, 0x8, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xce}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x9, 0x7f}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x8, 0x9, 0x89, 0x20, 0xf9}, 0x19, &(0x7f0000001080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "18a6281fc08ad6120e0f8504591055de"}]}, 0x4, [{0xce, &(0x7f00000010c0)=@string={0xce, 0x3, "fdc6b95d80169f09e3295b703a36514849be3278d7315bee27d5aec384e656065effa6d4ee829fd75f30f458ab172f230d01bc950bae73db2be7eb145a3d49702cbb1793670b18d64aefafc6d90ba4c01885fd4626655f2d0b57d721d87969c1252acd9d11bc8bdb48aab71c9387a749bec24b3f7316929bc86c36586842059851ed2963499b0bd6b7d53ceda92c78f997f1624d8db616b1c8394e0bc138300dd5aed434914764b001f7cdad706cf2364cf31edad6dd75727f59f586c4c3718630268dfb000709b6e63fbfa9"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x3409}}, {0xb2, &(0x7f0000001200)=@string={0xb2, 0x3, "5e0e1766a0d6739cbac48eecaf20797b5880e10edd06a5d426067c53074c858de11875cfb9e7b954227e30ac46e24f3187099b8f293603e0d534e74064c4e0609671baa415efceba940663a8bf86820282683c144e8cdd27a9a7e56ff605e7ea5e9eb62df60d53265c505454b37fe5d1001631aa6f9dc92e51df0873707d1024977e20c1b99a018fe58f83af77984787d3c41800777df75fc33de9b00ffc9c164faf0b9729b2442584d5833d3a2c893c"}}, {0xdd, &(0x7f00000012c0)=@string={0xdd, 0x3, "8028c5f11d82df9a6c196c17b4b6cfe8bf16ae29993766bc1bff67be00e69b9148cbe2eae358ba6d2c19e6e8771eea7ba8d40aa2f37c0e0615189b2701594feeadd5ae7074dd1053a2f7b1784d8c1cadeeec8c8e3e4282bcca9dbf24ac4b672f615ac02a4489775f552bc8f7128a697dc82ab5aab830aa172a93b2b3513dd2ddaf8f9baf1b1842f596888b4ae49cb6face2b3165edc188ccb0b847b4fedeb3c7670b58ecd805640b1ee9b1cd0ed059d59fbf46aead150f0bfdad697b39b75c5516cedefc6e5e63d9b7d9f626df19604bfabef52b179866f3861c1a"}}]}) 5m3.13488451s ago: executing program 2 (id=1864): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000001380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@noquota}, {@max_batch_time}, {@noblock_validity}]}, 0xd, 0x5eb, &(0x7f0000001480)="$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") syz_mount_image$exfat(0x0, &(0x7f00000012c0)='./file0/file0\x00', 0x104880, 0x0, 0x0, 0x0, &(0x7f0000000200)) chdir(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 5m0.513440055s ago: executing program 2 (id=1869): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) futex_waitv(&(0x7f0000001700)=[{0x8ba, &(0x7f0000000180)=0xfffffffffffffff5, 0x2}, {0x7, &(0x7f00000001c0), 0x82}, {0x7, 0x0, 0x2}, {0x5, &(0x7f00000002c0)=0x2, 0x82}, {0xfffc, &(0x7f0000000340)=0x3ff, 0x2}, {0x1000000000000003, &(0x7f0000000500)=0x80000001, 0x82}, {0xe1b, 0x0, 0x2}, {0x9, &(0x7f0000000400)=0x9, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x5, &(0x7f00000004c0)=0x69b, 0x2}, {0x0, &(0x7f0000000240)=0x6, 0x2}, {0x8001, &(0x7f0000000540)=0x7, 0x82}, {0x78e55cfd, &(0x7f00000005c0)=0x1, 0x82}, {0x4, &(0x7f0000000600)=0x5, 0x82}, {0x25fa7ef3, &(0x7f0000000640)=0x9, 0x2}, {0xfff, &(0x7f00000006c0)=0x10000, 0x2}, {0xd55e, &(0x7f0000000740)=0xc, 0x82}, {0xf61b, 0x0, 0x82}, {0x80000001, &(0x7f0000000800)=0xb, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x2}, {0xffffffff, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x80, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, &(0x7f0000000d80)=0x4, 0x2}, {0x1, 0x0, 0x2}], 0x1a, 0x0, &(0x7f0000001f40), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "b4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95d83ffffa407677d18bc"}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80) 4m58.752434092s ago: executing program 2 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x40}}, 0x0) 4m56.844022208s ago: executing program 2 (id=1879): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="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", 0x903}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4m56.418178357s ago: executing program 2 (id=1880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0xfea7) copy_file_range(r5, &(0x7f00000001c0), r4, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 4m41.20334095s ago: executing program 35 (id=1880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0xfea7) copy_file_range(r5, &(0x7f00000001c0), r4, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 2.364865445s ago: executing program 0 (id=2551): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x42, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAMEAT(r0, &(0x7f00000003c0)={0x7, 0x4b, 0x2}, 0x7) 2.282520645s ago: executing program 0 (id=2543): r0 = getpid() openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_pidfd_open(r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x28001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 2.192057975s ago: executing program 7 (id=2545): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 2.175979035s ago: executing program 0 (id=2546): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce, 0x0, 0xffffffffffffffff}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.070900595s ago: executing program 7 (id=2547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x311, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) 2.067462655s ago: executing program 0 (id=2549): r0 = getpid() openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x28001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 2.012543274s ago: executing program 7 (id=2550): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000005c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0}) 1.953640814s ago: executing program 0 (id=2553): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x3e, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 1.929504634s ago: executing program 6 (id=2554): r0 = msgget$private(0x0, 0x421) unshare(0x8000000) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) 1.839037894s ago: executing program 6 (id=2555): r0 = socket$qrtr(0x2a, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$qrtr(r0, 0x0, 0x0) 1.832009864s ago: executing program 6 (id=2556): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) 1.768584004s ago: executing program 6 (id=2557): r0 = getpid() openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_pidfd_open(r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x28001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 1.662463624s ago: executing program 6 (id=2560): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce, 0x0, 0xffffffffffffffff}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.386454263s ago: executing program 7 (id=2565): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000) read$char_usb(r1, &(0x7f00000001c0)=""/188, 0xbc) read$char_usb(r1, &(0x7f0000000100)=""/74, 0x4a) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2c, 0x23, 0xb7, 0x40, 0x1bc7, 0x1040, 0xb5b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x12, 0xc7, 0x1c}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x9, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x2, 0x1b, &(0x7f0000000000)=ANY=[], 0x0) 1.383219634s ago: executing program 6 (id=2566): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) listen(r0, 0x8957) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r0, r0, 0x0) 994.933963ms ago: executing program 0 (id=2574): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000300)='Q\a') 798.224152ms ago: executing program 3 (id=2579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x20000004) 754.784712ms ago: executing program 3 (id=2580): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) 663.095222ms ago: executing program 3 (id=2581): socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x77, 0xc8}}}, 0x6) 634.692922ms ago: executing program 3 (id=2583): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000005, 0x13, r0, 0xb183c000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) 514.934861ms ago: executing program 3 (id=2585): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005740)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="f143", 0x2}], 0x1, 0x0, 0x0, 0xd9c3b26fccd5de9f}], 0x1, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) 377.703831ms ago: executing program 3 (id=2586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x8}, 0x8) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 351.019841ms ago: executing program 8 (id=2587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce, 0x0, 0xffffffffffffffff}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 290.896411ms ago: executing program 7 (id=2588): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 267.468481ms ago: executing program 8 (id=2589): r0 = getpid() openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x28001) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 214.408861ms ago: executing program 7 (id=2590): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 176.3149ms ago: executing program 8 (id=2591): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 94.981091ms ago: executing program 8 (id=2592): pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0xffffffffffffffff}], 0x2, 0x0) syz_emit_vhci(&(0x7f0000004780)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x428}}}, 0x7) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) 62.358621ms ago: executing program 8 (id=2593): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4ab7, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=2594): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) kernel console output (not intermixed with test programs): n, defaulting to 1000 [ 571.151733][ T4390] bond0 speed is unknown, defaulting to 1000 [ 571.856419][ T9716] input: syz0 as /devices/virtual/input/input22 [ 571.858180][ T9716] input: failed to attach handler leds to device input22, error: -6 [ 572.555494][ T9724] netlink: 'syz.2.1488': attribute type 10 has an invalid length. [ 572.710777][ T9724] bond0: (slave netdevsim0): Releasing backup interface [ 572.759858][ T9724] team0: Port device netdevsim0 added [ 573.084323][ T9731] input: syz0 as /devices/virtual/input/input23 [ 573.085965][ T9731] input: failed to attach handler leds to device input23, error: -6 [ 573.578785][ T9726] netlink: 'syz.2.1488': attribute type 10 has an invalid length. [ 573.626355][ T9726] team0: Port device netdevsim0 removed [ 573.634461][ T9726] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 574.922551][ T9742] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 574.959533][ T9742] bond0: (slave netdevsim0): Releasing backup interface [ 575.868084][ T9742] device netdevsim0 entered promiscuous mode [ 575.871010][ T9742] team0: Port device netdevsim0 added [ 575.878618][ T9748] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 576.024663][ T9748] device netdevsim0 left promiscuous mode [ 576.030272][ T9748] team0: Port device netdevsim0 removed [ 576.037109][ T9748] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 578.332982][ T9758] input: syz0 as /devices/virtual/input/input24 [ 578.334444][ T9758] input: failed to attach handler leds to device input24, error: -6 [ 578.624927][ T9760] netlink: 'syz.1.1498': attribute type 10 has an invalid length. [ 578.851560][ T9760] bond0: (slave netdevsim0): Releasing backup interface [ 580.183290][ T9773] input: syz0 as /devices/virtual/input/input25 [ 580.184912][ T9773] input: failed to attach handler leds to device input25, error: -6 [ 580.392880][ T9760] device netdevsim0 entered promiscuous mode [ 580.394557][ T9760] team0: Port device netdevsim0 added [ 582.083670][ T9790] random: crng reseeded on system resumption [ 582.297482][ T9793] random: crng reseeded on system resumption [ 582.325990][ T9793] bond0 speed is unknown, defaulting to 1000 [ 582.577874][ T9796] input: syz0 as /devices/virtual/input/input26 [ 582.579545][ T9796] input: failed to attach handler leds to device input26, error: -6 [ 585.290013][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 588.269527][ T9840] rdma_rxe: already configured on bond0 [ 589.373118][ T9848] netlink: 'syz.3.1522': attribute type 10 has an invalid length. [ 589.395309][ T9848] bond0: (slave netdevsim0): Releasing backup interface [ 589.501353][ T9848] device netdevsim0 entered promiscuous mode [ 589.503282][ T9848] team0: Port device netdevsim0 added [ 589.514057][ T11] infiniband syz0: set down [ 589.516677][ T9851] netlink: 'syz.3.1522': attribute type 10 has an invalid length. [ 589.567077][ T9851] device netdevsim0 left promiscuous mode [ 589.570008][ T9851] team0: Port device netdevsim0 removed [ 589.596867][ T9851] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 589.600746][ T9856] random: crng reseeded on system resumption [ 589.613311][ T4347] bond0 speed is unknown, defaulting to 1000 [ 589.657953][ T4342] infiniband syz0: set active [ 589.659203][ T14] bond0 speed is unknown, defaulting to 1000 [ 589.660481][ T14] bond0 speed is unknown, defaulting to 1000 [ 589.661739][ T14] bond0 speed is unknown, defaulting to 1000 [ 589.781026][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 591.109591][ T9868] input: syz0 as /devices/virtual/input/input27 [ 591.111338][ T9868] input: failed to attach handler leds to device input27, error: -6 [ 593.628143][ T9884] netlink: 'syz.1.1529': attribute type 4 has an invalid length. [ 596.889143][ T9885] netlink: 'syz.5.1531': attribute type 4 has an invalid length. [ 596.944717][ T9886] netlink: 'syz.1.1529': attribute type 4 has an invalid length. [ 596.949917][ T9887] netlink: 'syz.5.1531': attribute type 4 has an invalid length. [ 597.084117][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1533'. [ 598.114406][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1537'. [ 598.136016][ T9910] rdma_rxe: rxe_register_device failed with error -23 [ 598.137857][ T9910] rdma_rxe: failed to add bond0 [ 598.240020][ T9913] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 599.183274][ T9924] rdma_rxe: rxe_register_device failed with error -23 [ 599.185520][ T9924] rdma_rxe: failed to add bond0 [ 599.673382][ T9925] rdma_rxe: rxe_register_device failed with error -23 [ 599.676760][ T9925] rdma_rxe: failed to add bond0 [ 602.859365][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 603.137558][ T9771] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 603.552188][ T9771] usb 1-1: Using ep0 maxpacket: 8 [ 603.814178][ T9771] usb 1-1: config 9 has an invalid interface number: 72 but max is 1 [ 603.856176][ T9771] usb 1-1: config 9 has an invalid descriptor of length 129, skipping remainder of the config [ 603.861175][ T9771] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 603.863714][ T9771] usb 1-1: config 9 has no interface number 0 [ 603.865204][ T9771] usb 1-1: config 9 interface 72 altsetting 127 has an invalid endpoint descriptor of length 2, skipping [ 603.868175][ T9771] usb 1-1: config 9 interface 72 altsetting 127 endpoint 0x1 has invalid maxpacket 9226, setting to 64 [ 603.870597][ T9771] usb 1-1: config 9 interface 72 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 603.873341][ T9771] usb 1-1: config 9 interface 72 has no altsetting 0 [ 603.883393][ T9771] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=9b.50 [ 603.885285][ T9771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.887070][ T9771] usb 1-1: Product: ๞昗횠鱳쒺₯筹聘໡۝풥ئ卼䰇超ᣡ콵咹縢갰ㅏই辛㘩㓕䃧쑤惠熖꒺뫎ڔꡣ蚿ʂ梂ᐼ豎⟝ꞩ濥׶鹞ⶶ෶♓停呔羳퇥ᘀꨱ鵯⻉猈絰␐纗선骹輁迥꾃顷蝇쓓絷忷㷃냩ﰏ᚜꽏霋눩╄햄㶃ⰺ㲉 [ 603.893089][ T9771] usb 1-1: Manufacturer: 㐉 [ 603.894130][ T9771] usb 1-1: SerialNumber: ⢀舝髟ᥬᝬ뚴ᚿ⦮㞙뱦；빧醛쭈壣涺᤬ṷ篪풨ꈊ糳؎᠕➛夁햭炮匐碱豍괜躌䈾벂鷊Ⓙ䮬⽧婡⫀襄彷⭕訒絩⫈ꪵジឪ錪뎲㵑辯꾛᠛袖䪋鳤襁⯎攱쇭첈뢰둇잳୧ט୤춱퀎학뾟깆ᖭଏ귽筩뜹啜츖ﳞ幮⛶᧟䭠뻺⯵頗ᲆ [ 604.101196][ T9771] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 604.106171][ T9962] random: crng reseeded on system resumption [ 604.108212][ T9771] gp8psk: usb in 128 operation failed. [ 604.111094][ T9771] gp8psk: usb in 137 operation failed. [ 604.112273][ T9771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.118598][ T9771] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 604.120500][ T9771] usb 1-1: media controller created [ 604.125890][ T9771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.160542][ T9771] gp8psk_fe: Frontend attached [ 604.162837][ T9771] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 604.167055][ T9771] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 604.174990][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 604.222822][ T9771] gp8psk: usb in 138 operation failed. [ 604.224108][ T9771] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 604.225967][ T9771] gp8psk: found Genpix USB device pID = 203 (hex) [ 604.257011][ T9771] usb 1-1: USB disconnect, device number 7 [ 604.410501][ T9771] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 604.562165][ T9974] rdma_rxe: already configured on bond0 [ 604.739613][ T9976] rdma_rxe: rxe_register_device failed with error -23 [ 604.741692][ T9976] rdma_rxe: failed to add bond0 [ 606.119601][ T9989] netlink: 'syz.1.1556': attribute type 4 has an invalid length. [ 608.508340][ T9988] netlink: 'syz.1.1556': attribute type 4 has an invalid length. [ 609.789530][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 610.442288][T10013] rdma_rxe: rxe_register_device failed with error -23 [ 610.446470][T10013] rdma_rxe: failed to add bond0 [ 611.605117][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1566'. [ 613.046165][T10032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.048128][T10032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.059128][T10038] rdma_rxe: rxe_register_device failed with error -23 [ 613.062091][T10038] rdma_rxe: failed to add bond0 [ 614.942317][T10048] rdma_rxe: rxe_register_device failed with error -23 [ 614.943918][T10048] rdma_rxe: failed to add bond0 [ 615.036098][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 615.100673][T10060] netlink: 'syz.2.1575': attribute type 10 has an invalid length. [ 615.252635][T10060] bond0: (slave netdevsim0): Releasing backup interface [ 615.332532][T10060] team0: Port device netdevsim0 added [ 615.334314][T10062] netlink: 'syz.2.1575': attribute type 10 has an invalid length. [ 615.373531][T10071] random: crng reseeded on system resumption [ 615.392120][T10062] team0: Port device netdevsim0 removed [ 615.397081][T10062] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 615.780999][T10076] netlink: 'syz.0.1579': attribute type 4 has an invalid length. [ 616.856409][T10075] netlink: 'syz.0.1579': attribute type 4 has an invalid length. [ 616.904917][T10081] netlink: 'syz.3.1583': attribute type 10 has an invalid length. [ 617.103371][T10081] bond0: (slave netdevsim0): Releasing backup interface [ 617.780574][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.782153][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.789440][T10081] device netdevsim0 entered promiscuous mode [ 617.796209][T10081] team0: Port device netdevsim0 added [ 617.801294][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'. [ 617.832008][T10085] netlink: 'syz.3.1583': attribute type 10 has an invalid length. [ 617.896765][T10085] device netdevsim0 left promiscuous mode [ 617.914138][T10085] team0: Port device netdevsim0 removed [ 617.947048][T10085] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 617.956487][ T9] infiniband syz0: set active [ 618.317835][ T9771] bond0 speed is unknown, defaulting to 1000 [ 618.319699][ T22] bond0 speed is unknown, defaulting to 1000 [ 618.492433][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1588'. [ 618.951223][T10105] rdma_rxe: already configured on bond0 [ 620.079512][T10116] rdma_rxe: already configured on bond0 [ 621.242575][T10119] rdma_rxe: rxe_register_device failed with error -23 [ 621.245222][T10119] rdma_rxe: failed to add bond0 [ 621.613180][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1595'. [ 622.751607][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'. [ 623.785948][T10156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.793377][T10156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.512071][T10157] netlink: 'syz.3.1600': attribute type 4 has an invalid length. [ 625.034153][T10154] netlink: 'syz.3.1600': attribute type 4 has an invalid length. [ 625.928890][T10163] random: crng reseeded on system resumption [ 626.156186][T10166] rdma_rxe: rxe_register_device failed with error -23 [ 626.168407][T10166] rdma_rxe: failed to add bond0 [ 626.993001][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.996430][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.448499][T10183] rdma_rxe: rxe_register_device failed with error -23 [ 627.450526][T10183] rdma_rxe: failed to add bond0 [ 627.753929][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 629.017665][ T8901] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 629.198716][ T8901] usb 1-1: Using ep0 maxpacket: 8 [ 629.202594][ T8901] usb 1-1: config 9 has an invalid interface number: 72 but max is 1 [ 629.205398][ T8901] usb 1-1: config 9 has an invalid descriptor of length 129, skipping remainder of the config [ 629.209801][ T8901] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 629.215987][ T8901] usb 1-1: config 9 has no interface number 0 [ 629.232956][ T8901] usb 1-1: config 9 interface 72 altsetting 127 has an invalid endpoint descriptor of length 2, skipping [ 629.244970][ T8901] usb 1-1: config 9 interface 72 altsetting 127 endpoint 0x1 has invalid maxpacket 9226, setting to 64 [ 629.254843][ T8901] usb 1-1: config 9 interface 72 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 629.272290][ T8901] usb 1-1: config 9 interface 72 has no altsetting 0 [ 629.280444][T10203] random: crng reseeded on system resumption [ 629.291809][ T8901] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=9b.50 [ 629.293757][ T8901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.304968][ T8901] usb 1-1: Product: ๞昗횠鱳쒺₯筹聘໡۝풥ئ卼䰇超ᣡ콵咹縢갰ㅏই辛㘩㓕䃧쑤惠熖꒺뫎ڔꡣ蚿ʂ梂ᐼ豎⟝ꞩ濥׶鹞ⶶ෶♓停呔羳퇥ᘀꨱ鵯⻉猈絰␐纗선骹輁迥꾃顷蝇쓓絷忷㷃냩ﰏ᚜꽏霋눩╄햄㶃ⰺ㲉 [ 629.325293][ T8901] usb 1-1: Manufacturer: 㐉 [ 629.333790][ T8901] usb 1-1: SerialNumber: ⢀舝髟ᥬᝬ뚴ᚿ⦮㞙뱦；빧醛쭈壣涺᤬ṷ篪풨ꈊ糳؎᠕➛夁햭炮匐碱豍괜躌䈾벂鷊Ⓙ䮬⽧婡⫀襄彷⭕訒絩⫈ꪵジឪ錪뎲㵑辯꾛᠛袖䪋鳤襁⯎攱쇭첈뢰둇잳୧ט୤춱퀎학뾟깆ᖭଏ귽筩뜹啜츖ﳞ幮⛶᧟䭠뻺⯵頗ᲆ [ 629.515206][T10211] rdma_rxe: rxe_register_device failed with error -23 [ 629.516817][T10211] rdma_rxe: failed to add bond0 [ 630.428101][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1623'. [ 631.814245][ T8901] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 631.816257][ T8901] gp8psk: usb in 128 operation failed. [ 631.818175][ T8901] gp8psk: usb in 137 operation failed. [ 631.819754][ T8901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 631.828744][ T8901] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 631.830614][ T8901] usb 1-1: media controller created [ 631.837102][ T8901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 631.851763][ T8901] gp8psk_fe: Frontend attached [ 631.852779][ T8901] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 631.854453][ T8901] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 632.035782][T10238] random: crng reseeded on system resumption [ 632.079035][ T8901] gp8psk: usb in 138 operation failed. [ 632.080338][ T8901] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 632.082284][ T8901] gp8psk: found Genpix USB device pID = 203 (hex) [ 632.119715][ T8901] usb 1-1: USB disconnect, device number 8 [ 632.129327][T10237] rdma_rxe: rxe_register_device failed with error -23 [ 632.130776][T10237] rdma_rxe: failed to add bond0 [ 632.198686][ T8901] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 632.335737][T10245] rdma_rxe: rxe_register_device failed with error -23 [ 632.348304][T10245] rdma_rxe: failed to add bond0 [ 633.863695][T10253] rdma_rxe: rxe_register_device failed with error -23 [ 633.865200][T10253] rdma_rxe: failed to add bond0 [ 633.937056][T10252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.939313][T10252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.742053][ T4311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 634.746428][ T4311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 634.749211][ T4311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 634.752791][ T4311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 634.755098][ T4311] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 634.756864][ T4311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 634.974356][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'. [ 635.229205][T10263] bond0 speed is unknown, defaulting to 1000 [ 635.501782][T10263] chnl_net:caif_netlink_parms(): no params data found [ 636.786368][T10263] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.788085][T10263] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.790600][T10263] device bridge_slave_0 entered promiscuous mode [ 636.795016][T10263] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.796887][T10263] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.800358][T10263] device bridge_slave_1 entered promiscuous mode [ 636.816274][T10263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.818648][T10266] Bluetooth: hci4: command 0x0409 tx timeout [ 636.825012][T10263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.962087][T10263] team0: Port device team_slave_0 added [ 637.025028][T10263] team0: Port device team_slave_1 added [ 637.091232][T10263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.107506][T10263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.133414][T10263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.168022][T10263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.169800][T10263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.173825][T10289] random: crng reseeded on system resumption [ 637.216522][T10263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.438455][T10298] rdma_rxe: rxe_register_device failed with error -23 [ 638.440155][T10298] rdma_rxe: failed to add bond0 [ 638.492821][T10263] device hsr_slave_0 entered promiscuous mode [ 638.563349][T10263] device hsr_slave_1 entered promiscuous mode [ 638.627578][T10263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.629397][T10263] Cannot create hsr debugfs directory [ 638.637648][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1644'. [ 639.004770][T10266] Bluetooth: hci4: command 0x041b tx timeout [ 641.120722][ T4311] Bluetooth: hci4: command 0x040f tx timeout [ 641.809372][T10337] random: crng reseeded on system resumption [ 642.089218][T10341] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 642.091513][T10341] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 642.093339][T10341] device netdevsim0 left promiscuous mode [ 642.096843][T10341] team0: Port device netdevsim0 removed [ 642.107300][T10341] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 642.248478][T10332] netlink: 'syz.5.1647': attribute type 4 has an invalid length. [ 642.270015][T10333] netlink: 'syz.5.1647': attribute type 4 has an invalid length. [ 642.717120][T10351] rdma_rxe: rxe_register_device failed with error -23 [ 642.720210][T10351] rdma_rxe: failed to add bond0 [ 643.088505][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'. [ 643.190025][T10266] Bluetooth: hci4: command 0x0419 tx timeout [ 644.030850][T10359] netlink: 'syz.2.1656': attribute type 4 has an invalid length. [ 644.047934][T10358] netlink: 'syz.2.1656': attribute type 4 has an invalid length. [ 644.221004][ T7304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.667245][ T7304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.700486][T10263] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 645.863934][ T7304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.922807][T10263] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 646.019225][T10263] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 646.075087][T10369] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1659'. [ 646.077102][T10263] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 646.288443][ T7304] device netdevsim0 left promiscuous mode [ 646.296012][ T7304] team0: Port device netdevsim0 removed [ 646.307345][ T7304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.301038][T10263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.352697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 647.354897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 647.390510][T10263] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.413060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 647.425248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 647.443741][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.445399][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.484242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 647.512464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 647.522609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 647.527689][T10378] random: crng reseeded on system resumption [ 647.568158][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.569773][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.571794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 647.574447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 647.591578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 647.639453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 649.308698][T10263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 649.316412][T10263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 651.547274][T10422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.549944][T10422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.617607][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 651.628876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 651.631217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 651.634204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 651.636505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 651.644567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.647027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 651.657246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 651.663520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 651.816654][T10411] netlink: 'syz.5.1668': attribute type 4 has an invalid length. [ 651.824597][T10420] netlink: 'syz.5.1668': attribute type 4 has an invalid length. [ 652.696990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 652.699442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 652.727895][T10263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.712853][T10477] random: crng reseeded on system resumption [ 655.965997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 655.969792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.989785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 655.992050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 655.996914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 656.022353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 656.025010][T10263] device veth0_vlan entered promiscuous mode [ 656.041213][T10263] device veth1_vlan entered promiscuous mode [ 656.072875][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 656.075356][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 656.093788][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 656.111136][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 656.621294][T10263] device veth0_macvtap entered promiscuous mode [ 656.625157][T10263] device veth1_macvtap entered promiscuous mode [ 658.442821][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 658.445030][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 658.731658][T10502] input: syz0 as /devices/virtual/input/input28 [ 658.957476][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1681'. [ 659.576761][T10263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.578940][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 659.581189][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 659.587061][T10263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.607863][T10263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.041701][T10263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.121047][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 661.124042][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 661.129321][T10263] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.131171][T10263] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.133036][T10263] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.148668][T10263] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.317609][ T9823] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 661.527485][ T9823] usb 1-1: Using ep0 maxpacket: 16 [ 661.530159][ T9823] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 661.532900][ T9823] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 661.535208][ T9823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.541527][ T9823] usb 1-1: config 0 descriptor?? [ 661.543058][T10519] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 661.556665][ T9823] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 661.558394][ T9823] usb 1-1: No valid video chain found. [ 661.599816][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.601878][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.684892][ T5217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.686885][ T5217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.704957][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 662.875874][ T7732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.887823][ T4347] usb 1-1: USB disconnect, device number 9 [ 662.892572][ T7732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.898821][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 662.961682][T10544] random: crng reseeded on system resumption [ 664.298524][T10558] rdma_rxe: rxe_register_device failed with error -23 [ 664.301801][T10558] rdma_rxe: failed to add bond0 [ 664.356898][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1694'. [ 665.977516][T10585] rdma_rxe: already configured on bond0 [ 666.134731][T10584] rdma_rxe: rxe_register_device failed with error -23 [ 666.136230][T10584] rdma_rxe: failed to add bond0 [ 667.199616][ T7304] device hsr_slave_0 left promiscuous mode [ 667.661773][ T7304] device hsr_slave_1 left promiscuous mode [ 668.051834][T10608] rdma_rxe: rxe_register_device failed with error -23 [ 668.054204][T10608] rdma_rxe: failed to add bond0 [ 668.806351][T10613] random: crng reseeded on system resumption [ 668.977336][T10620] rdma_rxe: already configured on bond0 [ 669.058627][ T7304] device veth1_macvtap left promiscuous mode [ 669.060026][ T7304] device veth0_macvtap left promiscuous mode [ 669.061541][ T7304] device veth1_vlan left promiscuous mode [ 669.062894][ T7304] device veth0_vlan left promiscuous mode [ 669.290541][ T7304] bond7 (unregistering): Released all slaves [ 669.303628][ T7304] bond6 (unregistering): Released all slaves [ 669.311496][ T7304] bond5 (unregistering): Released all slaves [ 669.326506][ T7304] bond4 (unregistering): Released all slaves [ 669.363704][ T7304] bond3 (unregistering): Released all slaves [ 669.384408][ T7304] bond2 (unregistering): Released all slaves [ 669.397123][ T7304] bond1 (unregistering): Released all slaves [ 669.809541][T10631] rdma_rxe: rxe_register_device failed with error -23 [ 669.811646][T10631] rdma_rxe: failed to add bond0 [ 671.046010][T10638] rdma_rxe: rxe_register_device failed with error -23 [ 671.058557][T10638] rdma_rxe: failed to add bond0 [ 674.016283][T10652] rdma_rxe: rxe_register_device failed with error -23 [ 674.018050][T10652] rdma_rxe: failed to add bond0 [ 674.914866][T10663] random: crng reseeded on system resumption [ 676.664885][T10674] rdma_rxe: rxe_register_device failed with error -23 [ 676.666929][T10674] rdma_rxe: failed to add bond0 [ 677.646137][T10683] rdma_rxe: rxe_register_device failed with error -23 [ 677.656939][T10683] rdma_rxe: failed to add bond0 [ 678.761573][T10692] rdma_rxe: rxe_register_device failed with error -23 [ 678.763709][T10692] rdma_rxe: failed to add bond0 [ 679.094715][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 679.096196][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.736384][T10702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.740594][T10702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.187281][ T7304] bond0 (unregistering): Released all slaves [ 683.465278][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 683.489197][T10649] netlink: 'syz.0.1710': attribute type 4 has an invalid length. [ 683.565098][T10648] netlink: 'syz.0.1710': attribute type 4 has an invalid length. [ 683.839458][ T4311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.843466][ T4301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.846329][ T4311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.997750][ T4311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 684.001024][ T4311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 684.004512][ T4311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 684.133781][T10724] random: crng reseeded on system resumption [ 686.355968][T10736] rdma_rxe: rxe_register_device failed with error -23 [ 686.358074][T10736] rdma_rxe: failed to add bond0 [ 686.749157][ T4311] Bluetooth: hci3: command 0x0409 tx timeout [ 687.003449][T10744] rdma_rxe: already configured on bond0 [ 687.134134][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1735'. [ 687.769197][T10755] device syz_tun entered promiscuous mode [ 687.948174][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.950958][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.398131][T10757] rdma_rxe: rxe_register_device failed with error -23 [ 688.399735][T10757] rdma_rxe: failed to add bond0 [ 688.672480][T10755] device syz_tun left promiscuous mode [ 688.817567][ T4311] Bluetooth: hci3: command 0x041b tx timeout [ 690.115933][T10766] netlink: 'syz.6.1737': attribute type 4 has an invalid length. [ 691.224961][T10773] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 691.225747][T10782] rdma_rxe: rxe_register_device failed with error -23 [ 691.228631][T10782] rdma_rxe: failed to add bond0 [ 691.235563][T10266] Bluetooth: hci3: command 0x040f tx timeout [ 691.744423][T10774] netlink: 'syz.6.1737': attribute type 4 has an invalid length. [ 691.748229][T10772] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 691.859536][T10715] bond0 speed is unknown, defaulting to 1000 [ 693.116580][T10796] rdma_rxe: rxe_register_device failed with error -23 [ 693.118456][T10796] rdma_rxe: failed to add bond0 [ 693.322939][T10811] device syz_tun entered promiscuous mode [ 693.409331][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.413356][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.638311][ T4311] Bluetooth: hci3: command 0x0419 tx timeout [ 693.646938][T10811] device syz_tun left promiscuous mode [ 694.120088][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'. [ 694.190027][T10715] chnl_net:caif_netlink_parms(): no params data found [ 694.194015][T10822] rdma_rxe: rxe_register_device failed with error -23 [ 694.195536][T10822] rdma_rxe: failed to add bond0 [ 694.554013][T10715] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.580828][T10715] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.569003][T10841] rdma_rxe: rxe_register_device failed with error -23 [ 695.570759][T10841] rdma_rxe: failed to add bond0 [ 696.098067][T10715] device bridge_slave_0 entered promiscuous mode [ 696.123442][T10715] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.125078][T10715] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.164232][T10715] device bridge_slave_1 entered promiscuous mode [ 696.683963][T10849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.687840][T10849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.161914][T10839] netlink: 'syz.0.1749': attribute type 4 has an invalid length. [ 697.549482][T10837] netlink: 'syz.0.1749': attribute type 4 has an invalid length. [ 698.719823][T10848] device syz_tun entered promiscuous mode [ 698.723425][T10848] device syz_tun left promiscuous mode [ 699.157771][T10858] rdma_rxe: rxe_register_device failed with error -23 [ 699.258007][T10858] rdma_rxe: failed to add bond0 [ 700.537272][T10856] netlink: 'syz.3.1753': attribute type 4 has an invalid length. [ 700.554817][T10855] netlink: 'syz.3.1753': attribute type 4 has an invalid length. [ 700.659608][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 700.790704][T10715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.809370][T10876] rdma_rxe: rxe_register_device failed with error -23 [ 700.811075][T10876] rdma_rxe: failed to add bond0 [ 700.813108][T10715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.948931][T10715] team0: Port device team_slave_0 added [ 700.978412][T10715] team0: Port device team_slave_1 added [ 701.034620][T10715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.042438][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.076128][T10715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.411113][T10715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.412725][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.643518][T10715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.679855][T10901] rdma_rxe: rxe_register_device failed with error -23 [ 701.681922][T10901] rdma_rxe: failed to add bond0 [ 702.229115][T10886] netlink: 'syz.3.1761': attribute type 10 has an invalid length. [ 702.237733][T10886] bond0: (slave netdevsim0): Releasing backup interface [ 702.411432][T10886] device netdevsim0 entered promiscuous mode [ 702.413125][T10886] team0: Port device netdevsim0 added [ 702.658477][T10913] rdma_rxe: rxe_register_device failed with error -23 [ 702.660608][T10913] rdma_rxe: failed to add bond0 [ 702.720558][ T7304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.205944][T10904] rdma_rxe: rxe_register_device failed with error -23 [ 703.207636][T10904] rdma_rxe: failed to add bond0 [ 703.330839][T10653] infiniband syz0: set down [ 704.003539][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.007581][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.503938][T10715] device hsr_slave_0 entered promiscuous mode [ 704.558305][T10715] device hsr_slave_1 entered promiscuous mode [ 704.587567][T10715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.590459][T10715] Cannot create hsr debugfs directory [ 704.593564][ T4348] bond0 speed is unknown, defaulting to 1000 [ 704.669300][ T7304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.676472][T10922] device syz_tun entered promiscuous mode [ 704.679955][T10922] device syz_tun left promiscuous mode [ 704.680340][T10931] rdma_rxe: rxe_register_device failed with error -23 [ 704.682936][T10931] rdma_rxe: failed to add bond0 [ 704.765483][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'. [ 704.831714][ T22] bond0 speed is unknown, defaulting to 1000 [ 704.972701][ T22] bond0 speed is unknown, defaulting to 1000 [ 705.198738][T10939] rdma_rxe: rxe_register_device failed with error -23 [ 705.200805][T10939] rdma_rxe: failed to add bond0 [ 705.273597][ T7304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.900590][ T7304] bond0: (slave netdevsim0): Releasing backup interface [ 705.962665][ T7304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.095089][T10715] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 706.120341][T10715] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 706.149665][T10715] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 706.190902][T10715] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 706.590310][T10955] rdma_rxe: already configured on bond0 [ 707.609083][T10967] rdma_rxe: already configured on bond0 [ 708.325683][T10957] netlink: 'syz.2.1777': attribute type 10 has an invalid length. [ 708.343848][T10957] bond0: (slave netdevsim0): Releasing backup interface [ 708.348879][T10968] rdma_rxe: rxe_register_device failed with error -23 [ 708.350497][T10968] rdma_rxe: failed to add bond0 [ 708.390268][T10957] team0: Port device netdevsim0 added [ 708.599303][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1782'. [ 708.635102][T10977] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1782'. [ 708.891188][T10988] netlink: 'syz.6.1783': attribute type 4 has an invalid length. [ 710.096246][T10715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.018452][T11002] input: syz0 as /devices/virtual/input/input29 [ 712.019970][T11002] input: failed to attach handler leds to device input29, error: -6 [ 713.084191][T10989] netlink: 'syz.6.1783': attribute type 4 has an invalid length. [ 713.107119][T10715] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.126909][T10715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 713.129783][T10715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.154610][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 713.197242][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.207214][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 713.215738][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.226623][ T9154] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.228210][ T9154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.238329][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 713.265605][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 713.267895][ T9154] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.269448][ T9154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.271431][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 713.273787][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 713.276234][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 713.287022][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 713.289850][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 713.292238][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 713.294348][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 713.296317][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 713.304967][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 713.307354][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 716.157647][T11031] rdma_rxe: rxe_register_device failed with error -23 [ 716.159283][T11031] rdma_rxe: failed to add bond0 [ 716.357354][T11033] rdma_rxe: rxe_register_device failed with error -23 [ 716.359044][T11033] rdma_rxe: failed to add bond0 [ 716.937787][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 716.940143][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 716.949100][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 716.955736][T11025] netlink: 'syz.3.1789': attribute type 4 has an invalid length. [ 717.018973][T11023] netlink: 'syz.3.1789': attribute type 4 has an invalid length. [ 717.447870][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 717.449506][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 718.260939][T11051] rdma_rxe: already configured on bond0 [ 718.292767][T10715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.358410][T11065] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1796'. [ 719.383143][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1796'. [ 721.906504][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 721.908877][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 724.905433][T11110] input: syz0 as /devices/virtual/input/input30 [ 724.907187][T11110] input: failed to attach handler leds to device input30, error: -6 [ 725.391014][T11109] netlink: 'syz.0.1803': attribute type 4 has an invalid length. [ 725.417301][T11108] netlink: 'syz.0.1803': attribute type 4 has an invalid length. [ 725.484792][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 725.498056][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 725.508378][T10715] device veth0_vlan entered promiscuous mode [ 725.560119][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.562247][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.570009][T10715] device veth1_vlan entered promiscuous mode [ 725.588143][T11116] rdma_rxe: already configured on bond0 [ 725.630618][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 725.632880][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 725.636815][T10715] device veth0_macvtap entered promiscuous mode [ 725.668537][T10715] device veth1_macvtap entered promiscuous mode [ 725.737336][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1807'. [ 726.548347][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.550513][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.553862][T10715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.607030][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.621090][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.623274][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.625551][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.662217][T10715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.712812][ T7304] device hsr_slave_0 left promiscuous mode [ 726.883363][ T7304] device hsr_slave_1 left promiscuous mode [ 728.677649][T11148] rdma_rxe: rxe_register_device failed with error -23 [ 728.679228][T11148] rdma_rxe: failed to add bond0 [ 729.080927][T11149] input: syz0 as /devices/virtual/input/input31 [ 729.082573][T11149] input: failed to attach handler leds to device input31, error: -6 [ 729.887763][ T7304] device veth1_macvtap left promiscuous mode [ 729.889164][ T7304] device veth0_macvtap left promiscuous mode [ 729.890852][ T7304] device veth1_vlan left promiscuous mode [ 729.892070][ T7304] device veth0_vlan left promiscuous mode [ 729.986748][ T7304] bond11 (unregistering): Released all slaves [ 729.993632][ T7304] bond10 (unregistering): Released all slaves [ 730.002058][ T7304] bond9 (unregistering): Released all slaves [ 730.008943][ T7304] bond8 (unregistering): Released all slaves [ 730.020996][ T7304] bond7 (unregistering): Released all slaves [ 730.028482][ T7304] bond6 (unregistering): Released all slaves [ 730.801594][ T7304] bond5 (unregistering): Released all slaves [ 730.813378][ T7304] bond4 (unregistering): Released all slaves [ 730.819584][ T7304] bond3 (unregistering): Released all slaves [ 730.830051][ T7304] bond2 (unregistering): Released all slaves [ 730.836947][ T7304] bond1 (unregistering): Released all slaves [ 740.186441][ T7304] bond0 (unregistering): Released all slaves [ 740.302798][T11122] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1807'. [ 740.304951][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 740.307280][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 740.309570][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 740.313368][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 740.315671][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 740.323780][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 740.328740][T10715] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.330686][T10715] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.332402][T10715] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.334231][T10715] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.339017][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.340413][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 740.463945][T11179] netlink: 'syz.3.1816': attribute type 4 has an invalid length. [ 740.531518][T11178] netlink: 'syz.3.1816': attribute type 4 has an invalid length. [ 741.173026][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.176269][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.576287][T11196] rdma_rxe: rxe_register_device failed with error -23 [ 741.577982][T11196] rdma_rxe: failed to add bond0 [ 741.599470][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.601780][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.606597][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 741.667846][ T4679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.669672][ T4679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.762844][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 745.050192][T11242] input: syz0 as /devices/virtual/input/input32 [ 745.051885][T11242] input: failed to attach handler leds to device input32, error: -6 [ 745.567234][T11229] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 745.596049][T11229] 8021q: adding VLAN 0 to HW filter on device bond15 [ 745.830364][T11254] loop0: detected capacity change from 0 to 1024 [ 745.959304][T11254] EXT4-fs: Ignoring removed orlov option [ 745.961587][T11254] EXT4-fs (loop0): invalid first ino: 0 [ 746.616477][T11257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.618701][T11257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.648764][T11229] bond15: (slave gretap1): making interface the new active one [ 746.657224][T11229] bond15: (slave gretap1): Enslaving as an active interface with an up link [ 746.670813][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1830'. [ 746.677669][T11261] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1830'. [ 746.714750][T11262] device syz_tun entered promiscuous mode [ 746.751216][T11262] device syz_tun left promiscuous mode [ 746.938508][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): bond15: link becomes ready [ 749.737705][T11290] netlink: 'syz.6.1838': attribute type 4 has an invalid length. [ 749.867540][T11290] netlink: 'syz.6.1838': attribute type 4 has an invalid length. [ 750.687604][T11292] rdma_rxe: rxe_register_device failed with error -23 [ 750.689083][T11292] rdma_rxe: failed to add bond0 [ 751.359861][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'. [ 753.049185][T11317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.051125][T11317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.167243][T11312] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1843'. [ 755.376938][T11351] loop6: detected capacity change from 0 to 1024 [ 755.407183][T11351] EXT4-fs: Ignoring removed orlov option [ 755.446537][T11351] EXT4-fs (loop6): invalid first ino: 0 [ 759.562672][T11375] rdma_rxe: rxe_register_device failed with error -23 [ 759.564450][T11375] rdma_rxe: failed to add bond0 [ 759.662454][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1855'. [ 759.679546][T11380] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1855'. [ 760.213975][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.217256][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.589158][T10266] Bluetooth: hci4: command 0x0406 tx timeout [ 762.819333][T11421] loop0: detected capacity change from 0 to 1024 [ 762.821312][T11421] EXT4-fs: Ignoring removed orlov option [ 762.829276][T11421] EXT4-fs (loop0): invalid first ino: 0 [ 762.873274][T11426] loop2: detected capacity change from 0 to 1024 [ 762.893556][T11426] EXT4-fs: Ignoring removed orlov option [ 762.899859][T11426] EXT4-fs (loop2): invalid first ino: 0 [ 765.418583][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 765.514980][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 765.517201][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1866'. [ 766.935338][T11442] rdma_rxe: rxe_register_device failed with error -23 [ 766.936879][T11442] rdma_rxe: failed to add bond0 [ 769.080054][T11495] loop3: detected capacity change from 0 to 1024 [ 769.082086][T11495] EXT4-fs: Ignoring removed nobh option [ 769.083281][T11495] EXT4-fs: Ignoring removed mblk_io_submit option [ 769.085491][T11495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 769.157617][ T4341] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 769.191370][T11495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 769.202402][T11503] netlink: 'syz.2.1879': attribute type 10 has an invalid length. [ 769.261674][T11505] netlink: 'syz.2.1879': attribute type 10 has an invalid length. [ 769.282932][T11505] team0: Port device netdevsim0 removed [ 769.325485][T11505] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 769.337620][ T4341] usb 1-1: Using ep0 maxpacket: 8 [ 769.340364][ T4341] usb 1-1: config 9 has an invalid interface number: 72 but max is 1 [ 769.342278][ T4341] usb 1-1: config 9 has an invalid descriptor of length 129, skipping remainder of the config [ 769.344584][ T4341] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 769.346608][ T4341] usb 1-1: config 9 has no interface number 0 [ 769.354535][ T4341] usb 1-1: config 9 interface 72 altsetting 127 has an invalid endpoint descriptor of length 2, skipping [ 769.388577][ T4341] usb 1-1: config 9 interface 72 altsetting 127 endpoint 0x1 has invalid maxpacket 9226, setting to 64 [ 769.404618][ T4341] usb 1-1: config 9 interface 72 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 769.417593][ T4341] usb 1-1: config 9 interface 72 has no altsetting 0 [ 769.430407][ T4341] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=9b.50 [ 769.438743][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.448936][ T4341] usb 1-1: Product: ๞昗횠鱳쒺₯筹聘໡۝풥ئ卼䰇超ᣡ콵咹縢갰ㅏই辛㘩㓕䃧쑤惠熖꒺뫎ڔꡣ蚿ʂ梂ᐼ豎⟝ꞩ濥׶鹞ⶶ෶♓停呔羳퇥ᘀꨱ鵯⻉猈絰␐纗선骹輁迥꾃顷蝇쓓絷忷㷃냩ﰏ᚜꽏霋눩╄햄㶃ⰺ㲉 [ 769.484482][ T4341] usb 1-1: Manufacturer: 㐉 [ 769.492188][ T4341] usb 1-1: SerialNumber: ⢀舝髟ᥬᝬ뚴ᚿ⦮㞙뱦；빧醛쭈壣涺᤬ṷ篪풨ꈊ糳؎᠕➛夁햭炮匐碱豍괜躌䈾벂鷊Ⓙ䮬⽧婡⫀襄彷⭕訒絩⫈ꪵジឪ錪뎲㵑辯꾛᠛袖䪋鳤襁⯎攱쇭첈뢰둇잳୧ט୤춱퀎학뾟깆ᖭଏ귽筩뜹啜츖ﳞ幮⛶᧟䭠뻺⯵頗ᲆ [ 769.593204][T11509] 9pnet_virtio: no channels available for device syz [ 771.084969][ T4341] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 771.086954][ T4341] gp8psk: usb in 128 operation failed. [ 771.090053][ T4341] gp8psk: usb in 137 operation failed. [ 771.091302][ T4341] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 771.095688][ T4341] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 771.100015][ T4341] usb 1-1: media controller created [ 771.111777][ T4341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.276829][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 771.315799][ T4341] gp8psk_fe: Frontend attached [ 771.317059][ T4341] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 771.477084][ T4341] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 772.841274][ T4341] gp8psk: usb in 138 operation failed. [ 772.842474][ T4341] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 772.844464][ T4341] gp8psk: found Genpix USB device pID = 203 (hex) [ 772.891894][ T4341] usb 1-1: USB disconnect, device number 10 [ 772.963239][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1883'. [ 773.067705][ T4341] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 773.085641][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 773.087358][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1883'. [ 774.138394][T11562] loop6: detected capacity change from 0 to 1024 [ 774.141357][T11562] EXT4-fs: Ignoring removed nobh option [ 774.142556][T11562] EXT4-fs: Ignoring removed mblk_io_submit option [ 774.266772][T11562] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 776.370935][T11562] EXT4-fs: error -4 creating inode table initialization thread [ 776.373254][T11562] EXT4-fs (loop6): mount failed [ 777.608717][T11575] loop0: detected capacity change from 0 to 1024 [ 777.615192][T11575] EXT4-fs: Ignoring removed nobh option [ 777.616454][T11575] EXT4-fs: Ignoring removed mblk_io_submit option [ 777.963419][T11575] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 778.305074][T11575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 780.287248][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 780.345958][T11579] rdma_rxe: rxe_register_device failed with error -23 [ 780.355208][T11579] rdma_rxe: failed to add bond0 [ 782.252841][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 782.401669][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 782.403640][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1895'. [ 785.364492][T10266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 785.598454][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1900'. [ 786.127669][T10266] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 786.212479][T10266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 786.214840][T10266] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 786.218543][T10266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 786.220255][T10266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 786.354412][T11640] netlink: 'syz.0.1901': attribute type 10 has an invalid length. [ 786.468471][T11640] bond0: (slave netdevsim0): Releasing backup interface [ 786.610971][T11640] device netdevsim0 entered promiscuous mode [ 786.612705][T11640] team0: Port device netdevsim0 added [ 786.637775][T11642] netlink: 'syz.0.1901': attribute type 10 has an invalid length. [ 786.699555][T11642] device netdevsim0 left promiscuous mode [ 786.713497][T11642] team0: Port device netdevsim0 removed [ 786.723025][T11642] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 788.362652][T10266] Bluetooth: hci5: command 0x0409 tx timeout [ 788.813935][T11663] rdma_rxe: rxe_register_device failed with error -23 [ 788.816054][T11663] rdma_rxe: failed to add bond0 [ 790.516250][T10266] Bluetooth: hci5: command 0x041b tx timeout [ 791.107339][T11683] loop6: detected capacity change from 0 to 1024 [ 791.113839][T11683] EXT4-fs: Ignoring removed nobh option [ 791.115175][T11683] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.134175][T11683] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 791.357666][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 791.373550][T11683] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 791.614326][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 792.577621][ T4311] Bluetooth: hci5: command 0x040f tx timeout [ 793.310859][ T7732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.758526][T11634] bond0 speed is unknown, defaulting to 1000 [ 794.793292][T10263] EXT4-fs (loop6): unmounting filesystem. [ 795.064396][ T4311] Bluetooth: hci5: command 0x0419 tx timeout [ 796.360418][ T7732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.497765][T11705] netlink: 'syz.6.1915': attribute type 10 has an invalid length. [ 796.538870][T11705] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 797.932896][ T7732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.989253][T11725] loop7: detected capacity change from 0 to 512 [ 797.992455][T11721] rdma_rxe: rxe_register_device failed with error -23 [ 797.994004][T11721] rdma_rxe: failed to add bond0 [ 798.084738][T11634] chnl_net:caif_netlink_parms(): no params data found [ 798.748377][ T7732] bond0: (slave netdevsim0): Releasing backup interface [ 799.043504][ T7732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.059759][T11725] EXT4-fs (loop7): 1 orphan inode deleted [ 799.061029][T11725] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 799.108967][T11634] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.116688][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.120981][ T425] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 799.123293][ T425] EXT4-fs error (device loop7): ext4_release_dquot:6817: comm kworker/u4:4: Failed to release dquot type 1 [ 799.128525][T11634] device bridge_slave_0 entered promiscuous mode [ 799.256844][T11634] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.258598][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.261239][T11634] device bridge_slave_1 entered promiscuous mode [ 799.285202][T11634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.299312][T11634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.075738][T11749] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1921'. [ 801.081432][T11634] team0: Port device team_slave_0 added [ 801.084378][T11634] team0: Port device team_slave_1 added [ 801.138865][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1924'. [ 801.150675][T10715] EXT4-fs (loop7): unmounting filesystem. [ 801.181330][T11634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.182871][T11634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.217643][T11634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.228894][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1924'. [ 801.245671][T11634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.247176][T11634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.253281][T11634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.360412][T11634] device hsr_slave_0 entered promiscuous mode [ 801.437992][T11634] device hsr_slave_1 entered promiscuous mode [ 801.610352][T11634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.611986][T11634] Cannot create hsr debugfs directory [ 804.327724][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.329027][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.884385][T11772] netlink: 'syz.0.1929': attribute type 10 has an invalid length. [ 804.968903][T11788] rdma_rxe: rxe_register_device failed with error -23 [ 804.970460][T11788] rdma_rxe: failed to add bond0 [ 808.582301][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 808.585631][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 808.977748][T10266] Bluetooth: hci3: command 0x0406 tx timeout [ 809.063747][T11634] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 809.155052][T11634] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 809.273145][T11634] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 809.321343][T11634] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 809.563815][ T7732] bond15: (slave gretap1): Releasing active interface [ 809.932542][T11634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.963002][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 809.965208][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 809.989732][T11634] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.006928][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 810.010366][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 810.012943][ T4988] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.014498][ T4988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.599962][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.603151][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.141290][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 811.143679][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 811.148773][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 811.151920][ T4988] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.153449][ T4988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.159659][T11843] netlink: 'syz.0.1942': attribute type 10 has an invalid length. [ 811.177590][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 811.185052][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 811.194135][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 811.211882][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 811.295543][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 811.297900][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 811.301726][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 811.314330][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 811.316604][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 811.333755][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 811.336270][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 811.348452][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 811.521848][T11867] rdma_rxe: rxe_register_device failed with error -23 [ 811.532197][T11867] rdma_rxe: failed to add bond0 [ 812.013678][T11876] loop6: detected capacity change from 0 to 512 [ 812.683107][T11876] EXT4-fs (loop6): 1 orphan inode deleted [ 812.684471][T11876] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 812.827577][T10653] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 812.833149][T10653] EXT4-fs error (device loop6): ext4_release_dquot:6817: comm kworker/u4:27: Failed to release dquot type 1 [ 812.873542][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 812.875416][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 812.896244][T11634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.341076][T11892] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1946'. [ 814.406323][ T7732] device hsr_slave_0 left promiscuous mode [ 814.414429][T10263] EXT4-fs (loop6): unmounting filesystem. [ 814.635459][ T7732] device hsr_slave_1 left promiscuous mode [ 815.247646][ T7732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.249925][ T7732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.251529][ T7732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.253568][ T7732] device bridge_slave_1 left promiscuous mode [ 815.254926][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.355373][ T7732] device bridge_slave_0 left promiscuous mode [ 815.356838][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.651530][ T7732] device veth0_macvtap left promiscuous mode [ 815.652893][ T7732] device veth1_vlan left promiscuous mode [ 815.654231][ T7732] device veth0_vlan left promiscuous mode [ 817.538360][ T4347] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 817.738055][ T4347] usb 1-1: Using ep0 maxpacket: 8 [ 817.744672][ T4347] usb 1-1: config 9 has an invalid interface number: 72 but max is 1 [ 817.746504][ T4347] usb 1-1: config 9 has an invalid descriptor of length 129, skipping remainder of the config [ 817.751049][ T4347] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 817.753367][ T4347] usb 1-1: config 9 has no interface number 0 [ 817.754700][ T4347] usb 1-1: config 9 interface 72 altsetting 127 has an invalid endpoint descriptor of length 2, skipping [ 817.757124][ T4347] usb 1-1: config 9 interface 72 altsetting 127 endpoint 0x1 has invalid maxpacket 9226, setting to 64 [ 817.764578][ T4347] usb 1-1: config 9 interface 72 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 817.767737][ T4347] usb 1-1: config 9 interface 72 has no altsetting 0 [ 817.785741][ T4347] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=9b.50 [ 817.787920][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.789627][ T4347] usb 1-1: Product: ๞昗횠鱳쒺₯筹聘໡۝풥ئ卼䰇超ᣡ콵咹縢갰ㅏই辛㘩㓕䃧쑤惠熖꒺뫎ڔꡣ蚿ʂ梂ᐼ豎⟝ꞩ濥׶鹞ⶶ෶♓停呔羳퇥ᘀꨱ鵯⻉猈絰␐纗선骹輁迥꾃顷蝇쓓絷忷㷃냩ﰏ᚜꽏霋눩╄햄㶃ⰺ㲉 [ 817.796083][ T4347] usb 1-1: Manufacturer: 㐉 [ 817.797327][ T4347] usb 1-1: SerialNumber: ⢀舝髟ᥬᝬ뚴ᚿ⦮㞙뱦；빧醛쭈壣涺᤬ṷ篪풨ꈊ糳؎᠕➛夁햭炮匐碱豍괜躌䈾벂鷊Ⓙ䮬⽧婡⫀襄彷⭕訒絩⫈ꪵジឪ錪뎲㵑辯꾛᠛袖䪋鳤襁⯎攱쇭첈뢰둇잳୧ט୤춱퀎학뾟깆ᖭଏ귽筩뜹啜츖ﳞ幮⛶᧟䭠뻺⯵頗ᲆ [ 818.113039][ T7732] bond15 (unregistering): Released all slaves [ 818.161205][ T7732] bond14 (unregistering): Released all slaves [ 818.197565][ T7732] bond13 (unregistering): Released all slaves [ 818.210806][ T7732] bond12 (unregistering): Released all slaves [ 818.227907][ T7732] bond11 (unregistering): Released all slaves [ 818.235328][ T7732] bond10 (unregistering): Released all slaves [ 818.250758][ T7732] bond9 (unregistering): Released all slaves [ 818.263327][ T7732] bond8 (unregistering): Released all slaves [ 818.282839][ T7732] bond7 (unregistering): Released all slaves [ 818.321817][ T7732] bond6 (unregistering): Released all slaves [ 818.435465][ T7732] bond5 (unregistering): Released all slaves [ 818.594916][ T7732] bond4 (unregistering): Released all slaves [ 818.611367][ T7732] bond3 (unregistering): Released all slaves [ 818.650454][ T7732] bond2 (unregistering): Released all slaves [ 818.663739][ T7732] bond1 (unregistering): Released all slaves [ 818.945965][T11934] rdma_rxe: already configured on bond0 [ 819.745681][ T4347] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 819.754378][ T4347] gp8psk: usb in 128 operation failed. [ 819.756042][ T4347] gp8psk: usb in 137 operation failed. [ 819.757240][ T4347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 819.762980][ T4347] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 819.764765][ T4347] usb 1-1: media controller created [ 819.772033][ T4347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.778059][ T4347] gp8psk_fe: Frontend attached [ 819.779229][ T4347] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 819.780925][ T4347] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 819.794828][ T4347] gp8psk: usb in 138 operation failed. [ 819.796089][ T4347] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 819.798598][ T4347] gp8psk: found Genpix USB device pID = 203 (hex) [ 819.802588][ T4347] usb 1-1: USB disconnect, device number 11 [ 819.835287][ T4347] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 820.493015][T11942] loop7: detected capacity change from 0 to 512 [ 820.547239][T11942] EXT4-fs (loop7): 1 orphan inode deleted [ 820.550816][T11942] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 820.559500][T10653] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 820.561668][T10653] EXT4-fs error (device loop7): ext4_release_dquot:6817: comm kworker/u4:27: Failed to release dquot type 1 [ 821.662641][ T7732] team0 (unregistering): Port device team_slave_1 removed [ 821.762409][T11950] loop0: detected capacity change from 0 to 512 [ 821.801900][T11950] EXT4-fs (loop0): 1 orphan inode deleted [ 821.803170][T11950] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 821.949772][ T7732] team0 (unregistering): Port device team_slave_0 removed [ 821.969530][T10653] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 821.977574][T10653] EXT4-fs error (device loop0): ext4_release_dquot:6817: comm kworker/u4:27: Failed to release dquot type 1 [ 822.858192][ T7732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.089732][ T7732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.694248][ T7732] bond0 (unregistering): Released all slaves [ 825.943950][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1949'. [ 825.955138][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1949'. [ 825.962807][T11936] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 826.032281][T11936] device netdevsim0 left promiscuous mode [ 826.036500][T11936] team0: Port device netdevsim0 removed [ 826.041163][T11936] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 826.043961][T11947] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1957'. [ 826.046088][T11954] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1958'. [ 826.110425][ T9771] bond0 speed is unknown, defaulting to 1000 [ 826.117776][ T9771] bond0 speed is unknown, defaulting to 1000 [ 826.193839][T10715] EXT4-fs (loop7): unmounting filesystem. [ 826.224583][ T5473] infiniband syz0: set active [ 826.226592][ T9771] bond0 speed is unknown, defaulting to 1000 [ 826.227957][ T1963] bond0 speed is unknown, defaulting to 1000 [ 826.238539][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 826.241369][ T1963] bond0 speed is unknown, defaulting to 1000 [ 828.203963][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 828.206362][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 828.734133][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 828.736492][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 828.739587][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 828.741643][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 828.761361][T11634] device veth0_vlan entered promiscuous mode [ 828.784064][T11989] loop7: detected capacity change from 0 to 512 [ 828.808431][T11634] device veth1_vlan entered promiscuous mode [ 828.997542][T11989] EXT4-fs (loop7): 1 orphan inode deleted [ 828.998928][T11989] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 829.017674][ T4988] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 829.019941][ T4988] EXT4-fs error (device loop7): ext4_release_dquot:6817: comm kworker/u4:18: Failed to release dquot type 1 [ 829.043131][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 829.395603][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 829.586907][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 829.734544][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 829.755401][T11634] device veth0_macvtap entered promiscuous mode [ 829.853193][T11634] device veth1_macvtap entered promiscuous mode [ 829.951611][T12004] loop6: detected capacity change from 0 to 512 [ 830.614702][T11634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.616889][T11634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.642498][T12004] EXT4-fs (loop6): 1 orphan inode deleted [ 830.643985][T11634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.646182][T11634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.652340][T12004] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 830.685609][T11634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.713845][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 830.716235][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 830.728165][T11634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.735799][ T425] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 830.738608][ T425] EXT4-fs error (device loop6): ext4_release_dquot:6817: comm kworker/u4:4: Failed to release dquot type 1 [ 830.777294][T11634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.793313][T11634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.795414][T11634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.658765][T11634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.678192][T11634] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.680137][T11634] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.681846][T11634] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.706870][T11634] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.816538][T12020] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1963'. [ 832.834722][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 832.837205][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 834.021511][ T4988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.027042][T10715] EXT4-fs (loop7): unmounting filesystem. [ 834.032561][ T4988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.148044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 834.166578][T10263] EXT4-fs (loop6): unmounting filesystem. [ 834.170156][ T4988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.172457][ T4988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.188166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 834.256904][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1970'. [ 835.078043][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1970'. [ 835.134105][T12041] loop0: detected capacity change from 0 to 2048 [ 835.166302][T12045] netlink: 'syz.6.1971': attribute type 10 has an invalid length. [ 835.355850][T12041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 836.688629][T12056] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 836.823282][T12065] loop8: detected capacity change from 0 to 1024 [ 836.866068][T12065] EXT4-fs: Ignoring removed nobh option [ 836.896146][T12065] EXT4-fs: Ignoring removed mblk_io_submit option [ 836.952810][T12065] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 839.242011][T12065] EXT4-fs warning (device loop8): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop8. [ 839.282257][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 840.063372][T12079] rdma_rxe: already configured on bond0 [ 841.352268][T12092] loop7: detected capacity change from 0 to 512 [ 841.420683][T12092] EXT4-fs (loop7): 1 orphan inode deleted [ 841.421991][T12092] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 841.437686][ T9] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 841.440109][ T9] EXT4-fs error (device loop7): ext4_release_dquot:6817: comm kworker/u4:0: Failed to release dquot type 1 [ 842.757187][T12103] loop3: detected capacity change from 0 to 2048 [ 842.783918][T10715] EXT4-fs (loop7): unmounting filesystem. [ 842.811979][T12114] netlink: 'syz.0.1986': attribute type 10 has an invalid length. [ 842.869355][T12103] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 843.115800][T12112] loop8: detected capacity change from 0 to 512 [ 844.026140][T12112] EXT4-fs (loop8): 1 orphan inode deleted [ 844.032930][T12112] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 844.064129][ T4469] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 844.066266][ T4469] EXT4-fs error (device loop8): ext4_release_dquot:6817: comm kworker/u4:9: Failed to release dquot type 1 [ 844.074867][T12127] loop7: detected capacity change from 0 to 2048 [ 844.128257][T12127] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 844.157899][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 844.469944][T12137] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1983'. [ 845.108326][T12136] loop3: detected capacity change from 0 to 2048 [ 845.148958][T12136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 845.210992][T11634] EXT4-fs (loop8): unmounting filesystem. [ 845.255435][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1991'. [ 846.797713][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1991'. [ 846.938134][T10715] EXT4-fs (loop7): unmounting filesystem. [ 846.940348][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 847.658361][T12166] rdma_rxe: rxe_register_device failed with error -23 [ 847.660427][T12166] rdma_rxe: failed to add bond0 [ 850.385410][T12190] loop3: detected capacity change from 0 to 1024 [ 850.399638][T12190] EXT4-fs: Ignoring removed nobh option [ 850.401146][T12190] EXT4-fs: Ignoring removed mblk_io_submit option [ 852.034385][T12191] netlink: 'syz.6.1998': attribute type 10 has an invalid length. [ 853.051565][T12190] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 853.586386][T12190] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 855.416883][T12212] loop8: detected capacity change from 0 to 2048 [ 855.562214][T12211] rdma_rxe: rxe_register_device failed with error -23 [ 855.563845][T12211] rdma_rxe: failed to add bond0 [ 855.622869][T12220] loop6: detected capacity change from 0 to 2048 [ 855.625554][T12212] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 855.730548][T12220] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 857.389607][T10263] EXT4-fs (loop6): unmounting filesystem. [ 857.389885][T11634] EXT4-fs (loop8): unmounting filesystem. [ 857.816141][T12247] rdma_rxe: rxe_register_device failed with error -23 [ 857.819034][T12247] rdma_rxe: failed to add bond0 [ 858.652970][T12251] netlink: 'syz.7.2010': attribute type 10 has an invalid length. [ 858.677238][T12251] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 859.837273][T12262] loop7: detected capacity change from 0 to 1024 [ 859.855421][T12262] EXT4-fs: Ignoring removed nobh option [ 859.856785][T12262] EXT4-fs: Ignoring removed mblk_io_submit option [ 862.016858][T12262] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 862.633343][T12262] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 863.233317][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 863.519344][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.080769][T10715] EXT4-fs (loop7): unmounting filesystem. [ 868.163357][T12307] loop3: detected capacity change from 0 to 2048 [ 868.293988][T12307] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 868.536272][T12314] rdma_rxe: rxe_register_device failed with error -23 [ 868.538069][T12314] rdma_rxe: failed to add bond0 [ 869.559897][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 873.819361][T12355] xt_TPROXY: Can be used only with -p tcp or -p udp [ 875.698206][T12366] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2038'. [ 875.700976][T12366] netlink: 'syz.6.2038': attribute type 10 has an invalid length. [ 877.252441][T12378] netlink: 'syz.6.2041': attribute type 10 has an invalid length. [ 883.167277][T12424] loop8: detected capacity change from 0 to 512 [ 883.549956][T12425] rdma_rxe: rxe_register_device failed with error -23 [ 883.552324][T12425] rdma_rxe: failed to add bond0 [ 885.959054][T12424] EXT4-fs (loop8): orphan cleanup on readonly fs [ 885.965757][T12424] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2037: bg 0: block 248: padding at end of block bitmap is not set [ 885.972582][T12424] Quota error (device loop8): write_blk: dquota write failed [ 885.974389][T12424] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 885.976437][T12424] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.2037: Failed to acquire dquot type 1 [ 885.984218][T12424] EXT4-fs (loop8): 1 truncate cleaned up [ 886.013691][T12424] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 886.096736][T11634] EXT4-fs (loop8): unmounting filesystem. [ 886.503855][T12437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 887.106814][T12438] rdma_rxe: rxe_register_device failed with error -23 [ 887.108451][T12438] rdma_rxe: failed to add bond0 [ 888.300370][T12444] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2044'. [ 888.327196][T12444] netlink: 'syz.6.2044': attribute type 10 has an invalid length. [ 893.006324][T12489] loop7: detected capacity change from 0 to 512 [ 893.151100][T12490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 895.286160][T12489] EXT4-fs (loop7): orphan cleanup on readonly fs [ 895.304153][T12489] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2053: bg 0: block 248: padding at end of block bitmap is not set [ 895.311163][T12489] Quota error (device loop7): write_blk: dquota write failed [ 895.313082][T12489] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 895.315323][T12489] EXT4-fs error (device loop7): ext4_acquire_dquot:6794: comm syz.7.2053: Failed to acquire dquot type 1 [ 895.342645][T12489] EXT4-fs (loop7): 1 truncate cleaned up [ 895.353143][T12489] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 896.074667][T12499] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2057'. [ 896.115966][T12499] netlink: 'syz.8.2057': attribute type 10 has an invalid length. [ 896.158068][T12499] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 897.388107][T10715] EXT4-fs (loop7): unmounting filesystem. [ 898.334001][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2061'. [ 898.944501][T12526] rdma_rxe: rxe_register_device failed with error -23 [ 898.946135][T12526] rdma_rxe: failed to add bond0 [ 898.993712][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 899.244314][T12531] rdma_rxe: rxe_register_device failed with error -23 [ 899.246128][T12531] rdma_rxe: failed to add bond0 [ 900.667592][T12544] xt_TPROXY: Can be used only with -p tcp or -p udp [ 902.444034][T12558] loop3: detected capacity change from 0 to 512 [ 902.642464][T12558] EXT4-fs (loop3): orphan cleanup on readonly fs [ 902.656700][T12558] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2069: bg 0: block 248: padding at end of block bitmap is not set [ 902.666223][T12558] Quota error (device loop3): write_blk: dquota write failed [ 902.667905][T12558] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 902.670109][T12558] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.2069: Failed to acquire dquot type 1 [ 902.683667][T12558] EXT4-fs (loop3): 1 truncate cleaned up [ 902.694132][T12558] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 905.536172][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 905.599838][T12578] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2072'. [ 905.610179][T12578] netlink: 'syz.0.2072': attribute type 10 has an invalid length. [ 905.843331][T12586] loop3: detected capacity change from 0 to 512 [ 906.927894][T12586] EXT4-fs (loop3): orphan cleanup on readonly fs [ 906.942023][T12586] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2073: bg 0: block 248: padding at end of block bitmap is not set [ 906.947718][T12586] Quota error (device loop3): write_blk: dquota write failed [ 906.949581][T12586] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 906.951668][T12586] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.2073: Failed to acquire dquot type 1 [ 906.983554][T12586] EXT4-fs (loop3): 1 truncate cleaned up [ 906.993422][T12586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 908.138624][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'. [ 908.259595][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2075'. [ 908.945963][T12610] xt_TPROXY: Can be used only with -p tcp or -p udp [ 909.678687][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 910.704141][T12611] rdma_rxe: rxe_register_device failed with error -23 [ 910.705767][T12611] rdma_rxe: failed to add bond0 [ 912.066881][T10266] Bluetooth: hci5: command 0x0406 tx timeout [ 912.793707][T12641] netlink: 'syz.6.2086': attribute type 10 has an invalid length. [ 912.826836][T12641] bond0: (slave netdevsim0): Releasing backup interface [ 912.849672][T12639] xt_TPROXY: Can be used only with -p tcp or -p udp [ 912.891579][T12645] netlink: 'syz.6.2086': attribute type 10 has an invalid length. [ 912.895923][T12645] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 912.991394][ T8901] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 913.171416][ T8901] usb 1-1: Using ep0 maxpacket: 8 [ 913.173914][ T8901] usb 1-1: config 9 has an invalid interface number: 72 but max is 1 [ 913.175684][ T8901] usb 1-1: config 9 has an invalid descriptor of length 129, skipping remainder of the config [ 913.191623][ T8901] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 913.193374][ T8901] usb 1-1: config 9 has no interface number 0 [ 913.194665][ T8901] usb 1-1: config 9 interface 72 altsetting 127 has an invalid endpoint descriptor of length 2, skipping [ 913.196994][ T8901] usb 1-1: config 9 interface 72 altsetting 127 endpoint 0x1 has invalid maxpacket 9226, setting to 64 [ 913.247546][ T8901] usb 1-1: config 9 interface 72 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 913.255237][ T8901] usb 1-1: config 9 interface 72 has no altsetting 0 [ 913.265742][ T8901] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=9b.50 [ 913.274615][ T8901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.035300][ T8901] usb 1-1: Product: ๞昗횠鱳쒺₯筹聘໡۝풥ئ卼䰇超ᣡ콵咹縢갰ㅏই辛㘩㓕䃧쑤惠熖꒺뫎ڔꡣ蚿ʂ梂ᐼ豎⟝ꞩ濥׶鹞ⶶ෶♓停呔羳퇥ᘀꨱ鵯⻉猈絰␐纗선骹輁迥꾃顷蝇쓓絷忷㷃냩ﰏ᚜꽏霋눩╄햄㶃ⰺ㲉 [ 914.041670][ T8901] usb 1-1: Manufacturer: 㐉 [ 914.042876][ T8901] usb 1-1: SerialNumber: ⢀舝髟ᥬᝬ뚴ᚿ⦮㞙뱦；빧醛쭈壣涺᤬ṷ篪풨ꈊ糳؎᠕➛夁햭炮匐碱豍괜躌䈾벂鷊Ⓙ䮬⽧婡⫀襄彷⭕訒絩⫈ꪵジឪ錪뎲㵑辯꾛᠛袖䪋鳤襁⯎攱쇭첈뢰둇잳୧ט୤춱퀎학뾟깆ᖭଏ귽筩뜹啜츖ﳞ幮⛶᧟䭠뻺⯵頗ᲆ [ 914.053765][ T8901] usb 1-1: can't set config #9, error -71 [ 914.055885][ T8901] usb 1-1: USB disconnect, device number 12 [ 914.324068][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2090'. [ 914.709157][T12672] loop6: detected capacity change from 0 to 512 [ 916.098525][T12672] EXT4-fs (loop6): orphan cleanup on readonly fs [ 916.163184][T12672] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2091: bg 0: block 248: padding at end of block bitmap is not set [ 916.176109][T12672] Quota error (device loop6): write_blk: dquota write failed [ 916.177895][T12672] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 916.179988][T12672] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.2091: Failed to acquire dquot type 1 [ 916.217586][T12672] EXT4-fs (loop6): 1 truncate cleaned up [ 916.230365][T12672] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 917.440979][T12684] loop8: detected capacity change from 0 to 512 [ 917.585992][T12684] EXT4-fs (loop8): orphan cleanup on readonly fs [ 917.595559][T12684] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2092: bg 0: block 248: padding at end of block bitmap is not set [ 917.606648][T12684] Quota error (device loop8): write_blk: dquota write failed [ 917.608611][T12684] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 917.611144][T12684] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.2092: Failed to acquire dquot type 1 [ 917.639760][T12684] EXT4-fs (loop8): 1 truncate cleaned up [ 917.646431][T12684] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 918.232365][T10263] EXT4-fs (loop6): unmounting filesystem. [ 919.765432][T12702] xt_TPROXY: Can be used only with -p tcp or -p udp [ 920.796814][T12706] loop0: detected capacity change from 0 to 512 [ 920.939029][T12706] EXT4-fs (loop0): orphan cleanup on readonly fs [ 920.975846][T12706] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2096: bg 0: block 248: padding at end of block bitmap is not set [ 920.984905][T12706] Quota error (device loop0): write_blk: dquota write failed [ 920.986990][T12706] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 920.989522][T12706] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.2096: Failed to acquire dquot type 1 [ 921.232690][T11634] EXT4-fs (loop8): unmounting filesystem. [ 921.253939][T12703] loop3: detected capacity change from 0 to 128 [ 921.673197][T12703] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 922.006117][T12706] EXT4-fs (loop0): 1 truncate cleaned up [ 922.018164][T12706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 923.177585][T12719] xt_TPROXY: Can be used only with -p tcp or -p udp [ 924.204355][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 924.685529][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 924.697949][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.699386][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.747054][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2101'. [ 926.405336][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.407825][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.087585][T12748] loop7: detected capacity change from 0 to 512 [ 929.844902][T12748] EXT4-fs (loop7): orphan cleanup on readonly fs [ 929.856558][T12748] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2105: bg 0: block 248: padding at end of block bitmap is not set [ 929.862791][T12748] Quota error (device loop7): write_blk: dquota write failed [ 929.864747][T12748] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 929.866829][T12748] EXT4-fs error (device loop7): ext4_acquire_dquot:6794: comm syz.7.2105: Failed to acquire dquot type 1 [ 929.876129][T12748] EXT4-fs (loop7): 1 truncate cleaned up [ 929.898313][T12748] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 931.721361][T10715] EXT4-fs (loop7): unmounting filesystem. [ 933.022576][T12772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.024662][T12772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.129810][T12785] loop7: detected capacity change from 0 to 128 [ 934.207718][T12776] rdma_rxe: rxe_register_device failed with error -23 [ 934.209271][T12776] rdma_rxe: failed to add bond0 [ 937.475675][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2116'. [ 937.686236][T12818] loop0: detected capacity change from 0 to 512 [ 937.801336][T12818] EXT4-fs (loop0): orphan cleanup on readonly fs [ 937.828967][T12818] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2118: bg 0: block 248: padding at end of block bitmap is not set [ 937.835111][T12818] Quota error (device loop0): write_blk: dquota write failed [ 937.837124][T12818] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 937.839318][T12818] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.2118: Failed to acquire dquot type 1 [ 937.849968][T12818] EXT4-fs (loop0): 1 truncate cleaned up [ 937.854838][T12818] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 941.044587][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 942.078197][T12852] rdma_rxe: rxe_register_device failed with error -23 [ 942.079775][T12852] rdma_rxe: failed to add bond0 [ 943.088625][T12861] loop3: detected capacity change from 0 to 128 [ 943.153130][T12861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 943.289393][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2131'. [ 943.634964][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 946.725115][T12914] xt_TPROXY: Can be used only with -p tcp or -p udp [ 948.520120][T12926] rdma_rxe: rxe_register_device failed with error -23 [ 948.521717][T12926] rdma_rxe: failed to add bond0 [ 949.567265][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2144'. [ 949.661707][T12948] rdma_rxe: rxe_register_device failed with error -23 [ 949.663272][T12948] rdma_rxe: failed to add bond0 [ 951.986896][T12975] netlink: 'syz.8.2151': attribute type 10 has an invalid length. [ 952.059080][T12975] bond0: (slave netdevsim0): Releasing backup interface [ 952.155359][T12975] team0: Port device netdevsim0 added [ 952.178042][T12978] netlink: 'syz.8.2151': attribute type 10 has an invalid length. [ 952.283676][T12978] team0: Port device netdevsim0 removed [ 952.308754][T12978] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 954.692762][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2157'. [ 954.731375][T12992] rdma_rxe: rxe_register_device failed with error -23 [ 954.732979][T12992] rdma_rxe: failed to add bond0 [ 957.911859][T13039] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 957.934331][T13039] bond0: (slave netdevsim0): Releasing backup interface [ 958.010353][T13039] device netdevsim0 entered promiscuous mode [ 958.012359][T13039] team0: Port device netdevsim0 added [ 958.750483][T13043] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 958.876523][T13043] device netdevsim0 left promiscuous mode [ 958.879241][T13043] team0: Port device netdevsim0 removed [ 958.883883][T13043] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 960.397809][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.399679][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.970940][T13048] batman_adv: batadv0: Adding interface: dummy0 [ 960.989297][T13048] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.039640][T13048] batman_adv: batadv0: Interface activated: dummy0 [ 961.067344][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2168'. [ 961.105730][T13067] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2168'. [ 963.043645][T13083] rdma_rxe: rxe_register_device failed with error -23 [ 963.045102][T13083] rdma_rxe: failed to add bond0 [ 964.964113][T13107] netlink: 'syz.7.2180': attribute type 10 has an invalid length. [ 965.735059][T13107] bond0: (slave netdevsim0): Releasing backup interface [ 965.921931][T13107] team0: Port device netdevsim0 added [ 965.937715][T13110] netlink: 'syz.7.2180': attribute type 10 has an invalid length. [ 966.030076][T13119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 966.786790][T13110] team0: Port device netdevsim0 removed [ 966.790759][T13110] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 966.917344][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2184'. [ 967.015317][T13130] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2184'. [ 969.234564][T13140] rdma_rxe: rxe_register_device failed with error -23 [ 969.236079][T13140] rdma_rxe: failed to add bond0 [ 970.468750][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2195'. [ 970.512717][T13175] netlink: 'syz.3.2197': attribute type 10 has an invalid length. [ 970.578179][T13175] bond0: (slave netdevsim0): Releasing backup interface [ 970.690099][T13175] device netdevsim0 entered promiscuous mode [ 970.691984][T13175] team0: Port device netdevsim0 added [ 970.693558][T13177] netlink: 'syz.3.2197': attribute type 10 has an invalid length. [ 970.724426][T13177] device netdevsim0 left promiscuous mode [ 970.748677][T13177] team0: Port device netdevsim0 removed [ 970.787115][T13177] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 970.830196][ T4429] infiniband syz0: set active [ 970.839919][ T9771] bond0 speed is unknown, defaulting to 1000 [ 970.841348][ T4343] bond0 speed is unknown, defaulting to 1000 [ 970.843702][T13180] batman_adv: batadv0: Adding interface: dummy0 [ 970.845082][T13180] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.863692][T13180] batman_adv: batadv0: Interface activated: dummy0 [ 970.865924][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2198'. [ 971.093427][T13189] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2198'. [ 971.709936][T13192] batadv0: mtu less than device minimum [ 971.714388][T13192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.720116][T13192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.725366][T13192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.730579][T13192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.735762][T13192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.740837][T13192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.745840][T13192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.750935][T13192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.755906][T13192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.802976][T13200] loop8: detected capacity change from 0 to 128 [ 972.877125][T13216] xt_TPROXY: Can be used only with -p tcp or -p udp [ 979.973563][T13248] netlink: 'syz.7.2211': attribute type 10 has an invalid length. [ 979.983056][T13248] bond0: (slave netdevsim0): Releasing backup interface [ 980.081317][T13248] team0: Port device netdevsim0 added [ 980.087304][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2214'. [ 982.522980][T13259] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2214'. [ 983.145150][T13288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.148427][T13288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.022008][T13299] rdma_rxe: rxe_register_device failed with error -23 [ 984.027025][T13299] rdma_rxe: failed to add bond0 [ 986.168797][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.170245][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 986.973629][T13334] netlink: 'syz.8.2229': attribute type 10 has an invalid length. [ 987.025913][T13334] bond0: (slave netdevsim0): Releasing backup interface [ 987.742180][T13334] team0: Port device netdevsim0 added [ 987.743797][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2230'. [ 987.810522][T13335] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2230'. [ 987.910906][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2231'. [ 990.845561][T13375] loop0: detected capacity change from 0 to 128 [ 991.881651][T13392] rdma_rxe: rxe_register_device failed with error -23 [ 991.887698][T13392] rdma_rxe: failed to add bond0 [ 993.312338][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2243'. [ 993.377505][T13402] netlink: 'syz.6.2244': attribute type 10 has an invalid length. [ 993.439057][T13402] bond0: (slave netdevsim0): Releasing backup interface [ 993.498169][T13402] team0: Port device netdevsim0 added [ 993.499895][T13400] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2243'. [ 1000.544873][T13464] loop0: detected capacity change from 0 to 128 [ 1000.796346][T13469] rdma_rxe: rxe_register_device failed with error -23 [ 1000.798228][T13469] rdma_rxe: failed to add bond0 [ 1000.843359][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2256'. [ 1000.934873][T13474] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2256'. [ 1001.073873][T13481] netlink: 'syz.3.2257': attribute type 10 has an invalid length. [ 1001.129248][T13481] bond0: (slave netdevsim0): Releasing backup interface [ 1001.170680][T13481] device netdevsim0 entered promiscuous mode [ 1001.172521][T13481] team0: Port device netdevsim0 added [ 1001.174727][ T4621] infiniband syz0: set down [ 1001.176431][ T14] bond0 speed is unknown, defaulting to 1000 [ 1001.178947][ T4410] bond0 speed is unknown, defaulting to 1000 [ 1001.180404][ T4343] bond0 speed is unknown, defaulting to 1000 [ 1008.915448][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2268'. [ 1008.972166][T13535] rdma_rxe: rxe_register_device failed with error -23 [ 1008.973939][T13535] rdma_rxe: failed to add bond0 [ 1009.003441][T13533] netlink: 'syz.0.2271': attribute type 10 has an invalid length. [ 1010.214137][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.217584][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.813926][T13533] bond0: (slave netdevsim0): Releasing backup interface [ 1010.870980][T13533] device netdevsim0 entered promiscuous mode [ 1010.872585][T13533] team0: Port device netdevsim0 added [ 1010.874194][T13528] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2268'. [ 1010.988227][T13552] loop6: detected capacity change from 0 to 128 [ 1019.034480][T13603] netlink: 'syz.8.2286': attribute type 10 has an invalid length. [ 1019.124482][T13604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 1019.186367][T13607] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2287'. [ 1019.204918][T13609] rdma_rxe: already configured on bond0 [ 1021.337918][T13625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.339843][T13625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.876108][T13643] loop6: detected capacity change from 0 to 128 [ 1027.985206][T13685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2300'. [ 1028.173901][T13691] netlink: 'syz.8.2299': attribute type 10 has an invalid length. [ 1029.160088][T13708] rdma_rxe: already configured on bond0 [ 1034.200443][T13757] netlink: 'syz.6.2316': attribute type 10 has an invalid length. [ 1040.737737][ T3874] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1041.017827][ T3874] usb 1-1: Using ep0 maxpacket: 8 [ 1042.575910][ T3874] usb 1-1: config 9 has an invalid interface number: 72 but max is 1 [ 1042.577797][ T3874] usb 1-1: config 9 has an invalid descriptor of length 64, skipping remainder of the config [ 1042.638147][ T3874] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1042.640145][ T3874] usb 1-1: config 9 has no interface number 0 [ 1042.641440][ T3874] usb 1-1: config 9 interface 72 altsetting 127 has an invalid endpoint descriptor of length 2, skipping [ 1042.643703][ T3874] usb 1-1: config 9 interface 72 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1042.646322][ T3874] usb 1-1: config 9 interface 72 has no altsetting 0 [ 1042.659384][ T3874] usb 1-1: string descriptor 0 read error: -71 [ 1042.660779][ T3874] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=9b.50 [ 1042.662595][ T3874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.688657][ T3874] usb 1-1: can't set config #9, error -71 [ 1042.697361][ T3874] usb 1-1: USB disconnect, device number 13 [ 1049.864293][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.865708][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 1051.180196][T13879] rdma_rxe: rxe_register_device failed with error -23 [ 1051.182231][T13879] rdma_rxe: failed to add bond0 [ 1052.106095][T13895] net_ratelimit: 10 callbacks suppressed [ 1052.106114][T13895] batadv0: mtu less than device minimum [ 1052.111934][T13895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.117147][T13895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.122425][T13895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.127733][T13895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.132804][T13895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.137820][T13895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.142909][T13895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.148001][T13895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.153163][T13895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1053.436374][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.452418][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.547114][T13939] tipc: Started in network mode [ 1053.548254][T13939] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1053.550788][T13939] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 1053.552711][T13939] tipc: Enabled bearer , priority 10 [ 1053.683487][T13947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2365'. [ 1054.200381][T13979] binder: 13978:13979 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 1054.285405][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.298256][T13985] binder: 13984:13985 tried to acquire reference to desc 0, got 1 instead [ 1054.302572][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.312342][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.312455][T11193] binder: undelivered TRANSACTION_COMPLETE [ 1054.314342][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.343693][T11193] binder: undelivered transaction 10, process died. [ 1054.364907][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.375913][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.471862][T13995] trusted_key: encrypted_key: master key parameter '' is invalid [ 1054.569477][T11193] tipc: Node number set to 1 [ 1054.927564][T11193] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1055.127488][T11193] usb 1-1: Using ep0 maxpacket: 16 [ 1055.130248][T11193] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1055.134588][T11193] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1055.136646][T11193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.157503][T11193] usb 1-1: Product: syz [ 1055.158883][T11193] usb 1-1: Manufacturer: syz [ 1055.159826][T11193] usb 1-1: SerialNumber: syz [ 1055.169493][T11193] usb 1-1: config 0 descriptor?? [ 1055.392913][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.394978][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.855746][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.858822][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.280424][T14054] bridge0: port 3(gretap0) entered blocking state [ 1056.288220][T14054] bridge0: port 3(gretap0) entered disabled state [ 1056.293164][T14054] device gretap0 entered promiscuous mode [ 1056.296337][T14054] bridge0: port 3(gretap0) entered blocking state [ 1056.298139][T14054] bridge0: port 3(gretap0) entered forwarding state [ 1056.401527][T14060] binder: 14059:14060 tried to acquire reference to desc 0, got 1 instead [ 1056.404536][T14060] binder: 14059:14060 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1056.407125][T14060] binder: 14060 RLIMIT_NICE not set [ 1056.435797][T14060] binder: 14060 RLIMIT_NICE not set [ 1056.437137][T14060] binder: send failed reply for transaction 15 to 14059:14060 [ 1056.445096][T14060] binder: 14059:14060 transaction 15 fd fixups failed 29201/-12, line 4675 [ 1056.455605][ T4348] binder: undelivered TRANSACTION_COMPLETE [ 1056.456934][ T4348] binder: undelivered TRANSACTION_ERROR: 29201 [ 1056.471312][T14066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.473172][T14066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.724469][T14082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.726450][T14082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.873419][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2428'. [ 1056.877087][T14093] device hsr_slave_0 left promiscuous mode [ 1056.937577][T14093] device hsr_slave_1 left promiscuous mode [ 1057.657907][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.659767][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.727020][ T27] audit: type=1326 audit(1057.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.6.2442" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f52ba8 code=0x0 [ 1057.757091][ T4348] usb 1-1: USB disconnect, device number 14 [ 1058.019308][T10266] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1058.021406][T10266] Bluetooth: hci1: Injecting HCI hardware error event [ 1058.025289][ T4311] Bluetooth: hci1: hardware error 0x00 [ 1058.277652][ T4348] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1058.485577][ T4348] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1058.487824][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.489648][ T4348] usb 1-1: Product: syz [ 1058.490543][ T4348] usb 1-1: Manufacturer: syz [ 1058.491538][ T4348] usb 1-1: SerialNumber: syz [ 1058.515175][ T4348] usb 1-1: config 0 descriptor?? [ 1058.884827][T14148] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2451'. [ 1058.934121][ T4348] usb 1-1: Firmware version (0.0) predates our first public release. [ 1058.936294][ T4348] usb 1-1: Please update to version 0.2 or newer [ 1058.940881][ T4348] usb 1-1: Firmware: build [ 1059.009033][T14155] tipc: Failed to obtain node identity [ 1059.010325][T14155] tipc: Enabling of bearer rejected, failed to enable media [ 1059.156943][T14159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.163129][T14159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.175844][ T4348] usb 1-1: USB disconnect, device number 15 [ 1059.267739][T14097] net_ratelimit: 11 callbacks suppressed [ 1059.267758][T14097] Set syz1 is full, maxelem 65536 reached [ 1059.334298][T14163] loop7: detected capacity change from 0 to 16384 [ 1059.428864][T14163] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.431555][T14163] Buffer I/O error on dev loop7, logical block 3, async page read [ 1059.433472][T14163] loop7: unable to read partition table [ 1059.435312][T14163] loop7: partition table beyond EOD, truncated [ 1059.436689][T14163] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 1059.593845][T14170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.610695][T14170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.257822][ T4311] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1060.268781][T14190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2471'. [ 1060.532290][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.536685][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.911949][T12082] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1060.947273][T14223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.952702][T14223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.044838][T14227] tipc: Started in network mode [ 1061.046005][T14227] tipc: Node identity 7, cluster identity 4711 [ 1061.047319][T14227] tipc: Node number set to 7 [ 1061.087765][T12082] usb 1-1: Using ep0 maxpacket: 8 [ 1061.092444][T12082] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1061.094444][T12082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.096223][T12082] usb 1-1: Product: syz [ 1061.103116][T12082] usb 1-1: Manufacturer: syz [ 1061.104169][T12082] usb 1-1: SerialNumber: syz [ 1061.123779][T12082] usb 1-1: config 0 descriptor?? [ 1061.130370][T12082] gspca_main: se401-2.14.0 probing 047d:5003 [ 1061.335722][T14210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.351467][T14210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.630792][T14248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.635619][T14248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.759608][T12082] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 1061.764971][T12082] usb 1-1: device reset changed ep0 maxpacket size! [ 1061.784486][T12082] gspca_se401: read req failed req 0x06 error -19 [ 1061.792094][T12082] usb 1-1: USB disconnect, device number 16 [ 1061.879849][T14263] binder: 14262:14263 tried to acquire reference to desc 0, got 1 instead [ 1061.883565][ T8901] binder: release 14262:14263 transaction 20 out, still active [ 1061.885539][ T8901] binder: undelivered TRANSACTION_COMPLETE [ 1061.907675][ T8901] binder: send failed reply for transaction 20, target dead [ 1061.947725][T12082] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1061.950828][T14268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.954065][T14268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.958159][T14269] device netdevsim0 entered promiscuous mode [ 1062.052520][T14273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.054674][T14273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.147643][T12082] usb 1-1: Using ep0 maxpacket: 16 [ 1062.150446][T12082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.152672][T12082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.154760][T12082] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1062.157510][T12082] usb 1-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 1062.159431][T12082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.164612][T12082] usb 1-1: config 0 descriptor?? [ 1062.414599][T14210] dccp_invalid_packet: P.Data Offset(10) too large [ 1062.421719][T12082] usbhid 1-1:0.0: can't add hid device: -71 [ 1062.423174][T12082] usbhid: probe of 1-1:0.0 failed with error -71 [ 1062.428476][T12082] usb 1-1: USB disconnect, device number 17 [ 1062.928922][T14306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.930909][T14306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.961640][T14308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.963588][T14308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.128353][T14318] binder: tried to use weak ref as strong ref [ 1063.129646][T14318] binder: 14317:14318 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1063.136735][T14318] binder: 14317:14318 got transaction to invalid handle, 1 [ 1063.143964][T14318] binder: 14318:14317 cannot find target node [ 1063.145700][T14318] binder: 14317:14318 transaction call to 0:0 failed 25/29201/-22, size 88-24 line 3054 [ 1063.154063][T12082] binder: undelivered TRANSACTION_ERROR: 29201 [ 1063.546217][T14342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.548601][T14342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.562950][T14342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.566252][T14342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.607292][T14342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.609636][T14342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.632486][T14342] dccp_invalid_packet: P.Data Offset(10) too large [ 1063.748554][T14352] binder: tried to use weak ref as strong ref [ 1063.749826][T14352] binder: 14350:14352 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1063.752167][T14352] binder: 14350:14352 got transaction to invalid handle, 1 [ 1063.753571][T14352] binder: 14352:14350 cannot find target node [ 1063.775267][T14352] binder: 14350:14352 transaction call to 0:0 failed 28/29201/-22, size 88-24 line 3054 [ 1063.778031][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 1063.915277][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.917188][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.365562][T14381] binder: tried to use weak ref as strong ref [ 1064.366884][T14381] binder: 14380:14381 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1064.383342][T14381] binder: 14380:14381 got transaction to invalid handle, 1 [ 1064.384842][T14381] binder: 14381:14380 cannot find target node [ 1064.503505][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.507931][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.544855][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.556758][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.682182][T14400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.686453][T14400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.769322][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.773113][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.780238][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.787703][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.004619][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.006841][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.158697][ T4348] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1065.347645][ T4348] usb 1-1: Using ep0 maxpacket: 16 [ 1065.350822][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.353502][ T4348] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1065.355328][ T4348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.361784][ T4348] usb 1-1: config 0 descriptor?? [ 1065.775621][ T4348] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1065.888251][ T4348] Unable to handle kernel paging request at virtual address dfff800000000000 [ 1065.890373][ T4348] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1065.892412][ T4348] Mem abort info: [ 1065.893261][ T4348] ESR = 0x0000000096000006 [ 1065.894171][ T4348] EC = 0x25: DABT (current EL), IL = 32 bits [ 1065.895453][ T4348] SET = 0, FnV = 0 [ 1065.896344][ T4348] EA = 0, S1PTW = 0 [ 1065.897239][ T4348] FSC = 0x06: level 2 translation fault [ 1065.913479][ T4348] Data abort info: [ 1065.914344][ T4348] ISV = 0, ISS = 0x00000006 [ 1065.915462][ T4348] CM = 0, WnR = 0 [ 1065.916344][ T4348] [dfff800000000000] address between user and kernel address ranges [ 1065.924083][ T4348] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 1065.925589][ T4348] Modules linked in: [ 1065.926417][ T4348] CPU: 0 PID: 4348 Comm: kworker/0:6 Not tainted 6.1.124-syzkaller #0 [ 1065.928118][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1065.930250][ T4348] Workqueue: usb_hub_wq hub_event [ 1065.931377][ T4348] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1065.933015][ T4348] pc : mcp_smbus_xfer+0x64/0xf4c [ 1065.934158][ T4348] lr : mcp_smbus_xfer+0x44/0xf4c [ 1065.935364][ T4348] sp : ffff8000218e5ee0 [ 1065.936165][ T4348] x29: ffff8000218e5ee0 x28: 0000000000000000 x27: dfff800000000000 [ 1065.937697][ T4348] x26: 1fffe0001aa15c36 x25: 0000000000000000 x24: 0000000000000000 [ 1065.939373][ T4348] x23: 0000000000000000 x22: 0000000000000018 x21: 0000000000000000 [ 1065.941118][ T4348] x20: 1ffff00002b41e40 x19: 0000000000000000 x18: ffff8000218e5ce0 [ 1065.942813][ T4348] x17: ffff800018b7c000 x16: ffff80001232f264 x15: ffff80001865cf80 [ 1065.944540][ T4348] x14: ffff0000ce9d0a78 x13: dfff800000000000 x12: 0000000000100000 [ 1065.946076][ T4348] x11: 00000000000c9c6b x10: ffff80003242b000 x9 : ffff80000fa9bd4c [ 1065.947622][ T4348] x8 : 0000000000000000 x7 : 1111111111111111 x6 : 0000000000000000 [ 1065.949300][ T4348] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ 1065.951052][ T4348] x2 : 0000000000000000 x1 : 0000000000000018 x0 : ffff0000d50ae088 [ 1065.952839][ T4348] Call trace: [ 1065.953501][ T4348] mcp_smbus_xfer+0x64/0xf4c [ 1065.954412][ T4348] __i2c_smbus_xfer+0x5b4/0x2dc8 [ 1065.955458][ T4348] i2c_smbus_xfer+0x210/0x31c [ 1065.956427][ T4348] i2c_default_probe+0x1c0/0x248 [ 1065.957489][ T4348] i2c_do_add_adapter+0x3c4/0x8d4 [ 1065.958503][ T4348] __process_new_adapter+0x28/0x3c [ 1065.959522][ T4348] bus_for_each_drv+0x158/0x1e0 [ 1065.960560][ T4348] i2c_register_adapter+0xde0/0x10e0 [ 1065.961601][ T4348] i2c_add_adapter+0x170/0x250 [ 1065.962543][ T4348] mcp2221_probe+0x240/0x56c [ 1065.963465][ T4348] hid_device_probe+0x238/0x328 [ 1065.964445][ T4348] really_probe+0x394/0xacc [ 1065.965398][ T4348] __driver_probe_device+0x194/0x3b4 [ 1065.966505][ T4348] driver_probe_device+0x78/0x330 [ 1065.967564][ T4348] __device_attach_driver+0x2a8/0x4f4 [ 1065.968742][ T4348] bus_for_each_drv+0x158/0x1e0 [ 1065.969717][ T4348] __device_attach+0x2f0/0x480 [ 1065.970648][ T4348] device_initial_probe+0x24/0x34 [ 1065.971649][ T4348] bus_probe_device+0xbc/0x1c8 [ 1065.972573][ T4348] device_add+0xae0/0xef4 [ 1065.973401][ T4348] hid_add_device+0x318/0x4a8 [ 1065.974301][ T4348] usbhid_probe+0x864/0xba4 [ 1065.975185][ T4348] usb_probe_interface+0x500/0x984 [ 1065.976286][ T4348] really_probe+0x394/0xacc [ 1065.977236][ T4348] __driver_probe_device+0x194/0x3b4 [ 1065.978283][ T4348] driver_probe_device+0x78/0x330 [ 1065.979401][ T4348] __device_attach_driver+0x2a8/0x4f4 [ 1065.980533][ T4348] bus_for_each_drv+0x158/0x1e0 [ 1065.981553][ T4348] __device_attach+0x2f0/0x480 [ 1065.982531][ T4348] device_initial_probe+0x24/0x34 [ 1065.983626][ T4348] bus_probe_device+0xbc/0x1c8 [ 1065.984654][ T4348] device_add+0xae0/0xef4 [ 1065.985581][ T4348] usb_set_configuration+0x15c0/0x1b40 [ 1065.986775][ T4348] usb_generic_driver_probe+0x8c/0x148 [ 1065.987920][ T4348] usb_probe_device+0x120/0x25c [ 1065.988865][ T4348] really_probe+0x394/0xacc [ 1065.989750][ T4348] __driver_probe_device+0x194/0x3b4 [ 1065.990893][ T4348] driver_probe_device+0x78/0x330 [ 1065.991959][ T4348] __device_attach_driver+0x2a8/0x4f4 [ 1065.993142][ T4348] bus_for_each_drv+0x158/0x1e0 [ 1065.994186][ T4348] __device_attach+0x2f0/0x480 [ 1065.995246][ T4348] device_initial_probe+0x24/0x34 [ 1065.996307][ T4348] bus_probe_device+0xbc/0x1c8 [ 1065.997301][ T4348] device_add+0xae0/0xef4 [ 1065.998188][ T4348] usb_new_device+0x908/0x1440 [ 1065.999202][ T4348] hub_event+0x243c/0x42e4 [ 1066.000087][ T4348] process_one_work+0x7ac/0x1404 [ 1066.001138][ T4348] worker_thread+0x8e4/0xfec [ 1066.002050][ T4348] kthread+0x250/0x2d8 [ 1066.002938][ T4348] ret_from_fork+0x10/0x20 [ 1066.003872][ T4348] Code: aa1303e0 963b6a3e f9400273 d343fe7c (387b6b88) [ 1066.005215][ T4348] ---[ end trace 0000000000000000 ]--- [ 1066.634924][ T4348] Kernel panic - not syncing: Oops: Fatal exception [ 1066.636413][ T4348] SMP: stopping secondary CPUs [ 1066.637420][ T4348] Kernel Offset: disabled [ 1066.638327][ T4348] CPU features: 0x080000,02070084,26017203 [ 1066.639511][ T4348] Memory Limit: none [ 1067.226498][ T4348] Rebooting in 86400 seconds..