last executing test programs: 6m18.806850817s ago: executing program 3 (id=302): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80007ff, 0xf86, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x3, 0x14, 0x7f, 0x7fff7ffc}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000000, 0x6, 0x2d1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x4a) 6m17.337154873s ago: executing program 3 (id=304): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$eJzs3UFoJFkZAOC/Ot3ZyUx2k1UPuuC6uiuZQac72bi7wcO6guhpQV3vY0w6IaSTDunO7iQsmsGDR0FEBU968SJ48iTIghePIizoWVFRRGf0IKhTS3dXZ2aS6k5mpiedSX8fVOrV66r3v9ehqutVPaoCGFnPRcRrEXE7TdMrETGV5ReyKfY7U2u9WzffXmpNSaTpG/9IIsnyumWlbU/EpWyzCxHx5S9EfC05Grexu7e+WKtVt7PlSnNjq9LY3bu6trG4Wl2tbs7Pz7288MrCSwuzA2nnZES8+rm/fO/bP/n8q7/85Ft/vPa3y19Psvw41I77VOz3YafppfZ3cfcG2w8Y7CwqtluYmchbY+xIzo1HXCcAAHp7X0R8LCKuxFSM9T+dBQAAAB5D6Wcm439J997dEeM98gEAAIDHSKE9BjYplLPxvpNRKJTL0R7D+4G4WKjVG81PrNR3Npc7Y2Wno1RYWatVZ7OxwtNRSlrLc+30neUXDy3PR8TTEfHdqYn2cnmpXlse9sUPAAAAGBGXDvX//z3V6f8DAAAA58z0sCsAAAAAPHL6/wAAAHD+6f8DAADAufbF119vTWn3/dfLb+7urNffvLpcbayXN3aWykv17a3yar2+2n5m38Zx5dXq9a1PxebO9Uqz2mhWGrt71zbqO5vNa2v3vAIbAAAAOEVPf+Sd3ycRsf/pifbUMn6yTU+4GnBWFQ9SSTbP2a3/8FRn/udTqhRwKsaGXQFgaIrDrgAwNKVhVwAYuuSYz3sO3vlNNv/oYOsDAAAM3syHet//L/Tdcr//x8CZZyeG0eX+P4yu9v3/k47kdbIA50rJGQCMvIe+/3+sNL2vCgEAAAM32Z6SQjm7vDcZhUK5HPFk+7UApWRlrVadjYinIuJ3U6UnWstz7S2TY/sMAAAAAAAAAAAAAAAAAAAAAAAAAEBHmiaRAgAAAOdaROGvya86z/KfmXph8vD1gfHkP1ORvSL0rR++8f3ri83m9lwr/58H+c0fZPkvDuMKBgAAAIyE4v2s3O2nd/vxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBIt26+vdSdTjPu3z8bEdN58YtxoT2/EKWIuPivJIp3bZdExNgA4k+0/nwwL37SqtZByLz4EwOIv3+jb/yYzr6FvPiXBhAfRtk7rePPa3n7XyGea8/z979ixD3LD6r38S8Ojn9jPfb/J08Y45l3f1bpGf9GxDPF/ONPN37SI/7zeQX+/FtHsr76lb29XvHTH0XM5P7+JPfEqjQ3tiqN3b2raxuLq9XV6ub8/NzLC68svLQwW1lZq1Wzv7kxvvPhX9zu1/6LPeJPH9P+F3LKG8/J+/+712++v5Ms5cW//HxO/F//OFvjaPxC9tv38Szd+nymm97vpO/27E9/+2y/9i/3aP9x///LvQo95MqXvvmnE64KAJyCxu7e+mKtVt0+t4lWL/0MVONxS/w3PRPVeLSJbwy0wDRN09Y+9RDlJHF6X0LSv6rDPjIBAACDduekf9g1AQAAAAAAAAAAAAAAAAAAgNF1Gk8aOxxz/yCVDOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FeAAAA//+kyeAN") syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x810000, &(0x7f0000000140)={[{@dmode={'dmode', 0x3d, 0xfff}}, {@noadinicb}, {@gid}, {@uid_forget}, {@unhide}, {@umask={'umask', 0x3d, 0x2}}, {@longad}, {@bs={'bs', 0x3d, 0x3e8}}, {@shortad}, {@uid}]}, 0xfc, 0xc32, &(0x7f0000000fc0)="$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") 6m15.101697145s ago: executing program 3 (id=306): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 6m12.707085825s ago: executing program 0 (id=308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@private0}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x4337, 0x3d) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m11.121674313s ago: executing program 0 (id=309): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) r1 = inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) 6m8.3105424s ago: executing program 3 (id=311): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x20000000, 0xf, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, 0x0, 0x5) 6m3.307833227s ago: executing program 0 (id=316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000980)="ad56c3c5820fae9d6dcd3292ea54c7ccef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}, {&(0x7f0000000600)="ce8d07ef06fe51fe99ea3ef6da83b0d110d35c265f7ca6d3dd8e97bddcd37fee0c3becce27c6e3d15ce32684f1d6563e24ed81f03d", 0x35}], 0x2, 0x0, 0x0, 0x20004000}], 0x1, 0x8810) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m0.466017517s ago: executing program 3 (id=320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@private0}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x4337, 0x3d) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m57.778247795s ago: executing program 0 (id=322): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe3523, 0x6, 0xefcb, 0x7fff, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0x4}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 5m57.563379912s ago: executing program 3 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x470, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x43c, 0x2, [@TCA_MATCHALL_ACT={0x438, 0x2, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0xff, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x0, 0x7, 0x3, 0xa14, 0x3, 0x7, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0xb, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x1000, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x6, 0x1000, 0x5915, 0x10001, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 5m56.404801497s ago: executing program 0 (id=324): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000000540)=@can={0x1d, r0}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)="b35faeb48f9281", 0x7}], 0x1, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}}, {{&(0x7f0000000880)=@can={0x1d, r1}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}, {{&(0x7f0000001280)=@phonet={0x23, 0x10, 0x6, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001300)="3801c7055bc004e54776290ebd37be2f2121f4d587369d4e31e3348c4b42bc45c95aa8ad9f5817874dd3f5aa2f7799ad5cc6fe82a49c5de87f37837f59f3a0", 0x3f}, {&(0x7f0000001380)="39872f10a2509fa452cdecc681e060e165cbdc5e24b69e57", 0x18}, {&(0x7f00000013c0)="023f29f33a159921a0d7c7f518a2bb138b424b0e12bf00e839c7e6e1435bfa993efe2f63d2a53e428cea85898ccd85d21d67aaa8ad161a719891ff1ad7e95b589cd3fc7c34d615093011d6d1ca070441d49c1a39e83d0c1369dff96135f882544194068d5a97265ff9a5a6d857570038416a36a9e2767305f363d41f87a7f18a281e7cb72b231cd66d18db78b525d5a71afaa68c1637fe18a0a85865078ac313976f4c03a09d8679cc1332d9a891236977a9", 0xb2}, {&(0x7f0000001480)="2c5c17a19480e6ceedb52dc7ae31bf69ef51c575d2598e08c61513acdd0f760cefcd7b46ec24797420d861101675fd1e62a18dcb575f184f010da5f8eff01bbd8085ec607099811f796e4a2067b5bd4d992c74f5dd490c39913d4da7b3f9ea000a2b54dc1723c862abac44c420be39507f95433c167e7af2aabd50a65e06d0452ed67bb9f3a98a3adc04f34b9299088a80fd0e27d3bb12c3fe1d1653247b5284e2834bd9576cf39281b3741ea75047983af27073cc482ae9780bc5b72c35dbc67c4be3840bb0f9ffa6146e32476cd631a7022d7cd3a802d216d9cde101", 0xdd}], 0x4}}, {{&(0x7f0000001640)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0xe, 0x9, "335d9fe48f6347e961aa133b50a0042b4939cd3d6fa2b06c5f18c6cdc92f72797cffc323878cb47db5bf1be8fa207da40736384f815b8802d4ab54b0f40004", 0x24}, 0x80, &(0x7f0000001800)=[{&(0x7f00000016c0)="a79e520b7e7c6000411f055203ece6fa", 0x10}, {0x0}, {&(0x7f0000003840)="02c3bc85809949b73a0fe1e0a4c500acec3b759c215d1b98437a047645666e6211516708425d44f23359cf28cc681698c30abd18003fc9240c228503dd4f2082c03c66db7dc35e827022ae5920f3036b2d43e533c0dd619fe965dab875c671c3ed8969c19801dbd3fe0ed3658b79c4a80f3a315f9b17fa5f733697d2ba5bead1167d650b90ddc4b0d0d4cf024fe2d25d68fceb4409f084c3291299d25b82c50e0db2e47f03edb06767e9aa6e907b4106d145b0ba5938eb13a068f985fc422180d26fc51f6f92132ec0175d3fe016bd83c50f39f836e027346dbffb4b87b29513a1b4c2c0da421c841ab07ff8", 0xec}, {&(0x7f0000003940)="51097f00d468a39ca66b983deff0d24d0f05fd376c56dd1ce54343ec6e384e731cc42431a13c3c0272abc3adcf8094d64359a9075fb004907937280a68be2ec819754da1080c6da67dbf71c972d938c72e5e90d4ed8a7abbc9e730a911b75a05e09ea936865822cb94babfa40ae223c8aebfdd38e638b68b5bbd91bd8bf91029926b8bdc75401561db151e132668775fbff01b4ca3ad7938f96b02f30e912d06b13bd3", 0xa3}], 0x4}}], 0x4, 0x4000) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000ec2800000034000000040000000000000014000000000000002900000034000000fdffffff00000000d0000000000000002900000004000000041600000000000007100000000102099f000800000000000000fe53f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b005008d3894180b6aa7527a0730000000010a7a018005000000000000000400000000000000060000000000000004000000000000000b0000000000000005020a7e05020bf4c910fc0200000000000000000000000000009300000000140000000000000029000000340000000000000000000000f80000000000000029000000360000005e1b000000000000ff2350d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b00010000010001000738000000030c00ff0f020000000000000066090000000000000700000000000000f7ffffffffffffff010000000000000001000000000000000854c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab071800000003040307000000000000000000008000000000000001000000000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x280}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m48.865753329s ago: executing program 0 (id=330): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x20000000, 0xf, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, 0x0, 0x5) 5m42.369508544s ago: executing program 32 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x470, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x43c, 0x2, [@TCA_MATCHALL_ACT={0x438, 0x2, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0xff, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x0, 0x7, 0x3, 0xa14, 0x3, 0x7, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0xb, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x1000, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x6, 0x1000, 0x5915, 0x10001, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 5m33.646999361s ago: executing program 33 (id=330): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x20000000, 0xf, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, 0x0, 0x5) 41.080308074s ago: executing program 2 (id=690): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40400) 39.500159854s ago: executing program 2 (id=691): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[], 0x20) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 34.778916594s ago: executing program 2 (id=693): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x240440c8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x800}]}}, 0x0, 0x26, 0x0, 0x1, 0x2}, 0x28) 32.499955961s ago: executing program 2 (id=698): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001900), 0x5912c1, 0x0) r1 = openat$ppp(0xffffff9c, &(0x7f0000001940), 0x2000, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000005000)=0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x1, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KDSETLED(r0, 0x4b32, 0x3) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x4de4, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787ab6c1c243f80026d1a8554fe581b59ded130e06a52b36e82ab289737f09ea917deb7bafd29f35239d20000001f00000000000000000000001600", "24031a1e770a00000000000000930606f900000000036e0000000600"}}) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 30.89287841s ago: executing program 2 (id=701): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 30.360200507s ago: executing program 2 (id=702): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setpriority(0x0, 0x0, 0xacf0165) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 21.904212768s ago: executing program 5 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x100000000, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.383613261s ago: executing program 1 (id=712): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x240440c8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 21.353343989s ago: executing program 5 (id=713): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x3210, &(0x7f0000000480)={0x0, 0x14c7, 0x80, 0x23, 0xa1}) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000020, 0x0, 0x7}]}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 21.022579748s ago: executing program 4 (id=650): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) 19.946024703s ago: executing program 4 (id=714): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x240440c8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 17.07327917s ago: executing program 5 (id=715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x242101, 0x0) close(r1) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa42080049000024"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 17.018576093s ago: executing program 1 (id=716): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f000001aa40)={0x2020}, 0x2020) 15.1156814s ago: executing program 34 (id=702): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setpriority(0x0, 0x0, 0xacf0165) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 14.691851962s ago: executing program 1 (id=720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[], 0x20) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 10.18889073s ago: executing program 4 (id=722): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x240440c8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x800}]}}, 0x0, 0x26, 0x0, 0x1, 0x2}, 0x28) 9.85360094s ago: executing program 6 (id=723): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f00000005c0)=""/229, 0x0, 0xe5, 0x1, 0x81, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(0x4) 9.339305226s ago: executing program 6 (id=724): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x240440c8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x800}]}}, 0x0, 0x26, 0x0, 0x1, 0x2}, 0x28) 9.034781783s ago: executing program 4 (id=725): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f000001aa40)={0x2020}, 0x2020) 8.268188702s ago: executing program 6 (id=726): socket(0x40000000015, 0x5, 0x0) epoll_create1(0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setpriority(0x0, 0x0, 0xacf0165) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 7.121967698s ago: executing program 4 (id=727): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x80300) ioctl$SG_IO(r0, 0x2285, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000c20000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r5}}, 0x120) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) 5.991411728s ago: executing program 1 (id=728): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x1}) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00') syz_io_uring_setup(0x4b7, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x0) 5.989875854s ago: executing program 5 (id=729): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000200)={0x4b62, 0xfffffffffffffe00}, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x10, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.953759334s ago: executing program 6 (id=730): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x80300) ioctl$SG_IO(r0, 0x2285, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000c20000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x4000008}, 0xffffffffffffffff, 0x8}}, 0x48) 4.465802931s ago: executing program 5 (id=731): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x240440c8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 3.41231378s ago: executing program 6 (id=732): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.298689158s ago: executing program 1 (id=733): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x3210, &(0x7f0000000480)={0x0, 0x14c7, 0x80, 0x23, 0xa1}) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000020, 0x0, 0x7}]}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 282.526207ms ago: executing program 1 (id=734): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00007deb18b4c29aa0e60208000004000000004022cb3a7efb1305bc6d08194d70313983615a064ce60e8dc3261f3e38121debcaa106160bbaf38823e0f7a78b6542fb03", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) listen(r5, 0x9) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000200)}, 0x10) connect$phonet_pipe(r2, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 234.458868ms ago: executing program 6 (id=735): memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4\xbb\am\xf7\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xfffffffffffffff9, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x406c813) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf5, 0x8, 0xfffffffe, 0x183}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) close_range(r3, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) dup3(r0, 0xffffffffffffffff, 0x6700000000000000) 193.955304ms ago: executing program 4 (id=736): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x498, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x498}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f72030000003078303030303030312c00"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 0s ago: executing program 5 (id=737): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00007deb18b4c29aa0e60208000004000000004022cb3a7efb1305bc6d08194d70313983615a064ce60e8dc3261f3e38121debcaa106160bbaf38823e0f7a78b6542fb03", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x100) listen(r3, 0x9) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): 000-0000-0000-0000-000000000000. [ 268.821817][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 268.872908][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.283'. [ 272.020371][ T7310] loop2: detected capacity change from 0 to 512 [ 272.034674][ T7310] ======================================================= [ 272.034674][ T7310] WARNING: The mand mount option has been deprecated and [ 272.034674][ T7310] and is ignored by this kernel. Remove the mand [ 272.034674][ T7310] option from the mount to silence this warning. [ 272.034674][ T7310] ======================================================= [ 272.070703][ T7310] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.722972][ T7310] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 272.750357][ T7310] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 272.758508][ T7310] EXT4-fs (loop2): orphan cleanup on readonly fs [ 272.767862][ T7310] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.286: Invalid block bitmap block 0 in block_group 0 [ 272.784373][ T7310] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.286: Invalid block bitmap block 0 in block_group 0 [ 272.799042][ T7310] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.286: Invalid block bitmap block 0 in block_group 0 [ 272.814637][ T7310] Quota error (device loop2): write_blk: dquota write failed [ 272.822382][ T7310] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 272.832252][ T7310] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.286: Failed to acquire dquot type 1 [ 272.846034][ T7310] EXT4-fs (loop2): 1 orphan inode deleted [ 272.870500][ T60] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 272.927701][ T60] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 273.049492][ T7310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.197628][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.321936][ T7316] bridge_slave_0: left allmulticast mode [ 273.335547][ T7316] bridge_slave_0: left promiscuous mode [ 273.341443][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.539855][ T7316] bridge_slave_1: left allmulticast mode [ 273.577022][ T7316] bridge_slave_1: left promiscuous mode [ 273.635738][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.906241][ T7316] bond0: (slave bond_slave_0): Releasing backup interface [ 274.694709][ T7323] loop0: detected capacity change from 0 to 512 [ 274.709525][ T7323] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.377565][ T7323] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 275.406180][ T7323] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 275.414264][ T7323] EXT4-fs (loop0): orphan cleanup on readonly fs [ 275.421903][ T7323] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.291: Invalid block bitmap block 0 in block_group 0 [ 275.436059][ T7323] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.291: Invalid block bitmap block 0 in block_group 0 [ 275.449907][ T7323] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.291: Invalid block bitmap block 0 in block_group 0 [ 275.468510][ T7323] Quota error (device loop0): write_blk: dquota write failed [ 275.476167][ T7323] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 275.486069][ T7323] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.291: Failed to acquire dquot type 1 [ 275.497995][ T7323] EXT4-fs (loop0): 1 orphan inode deleted [ 275.507289][ T13] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 277.050239][ T13] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 277.119468][ T7323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.247855][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.288086][ T7316] bond0: (slave bond_slave_1): Releasing backup interface [ 277.418286][ T7316] team0: Port device team_slave_0 removed [ 277.472811][ T7316] team0: Port device team_slave_1 removed [ 277.496659][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.545492][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.619304][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.675426][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.746059][ T7316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 284.769904][ T7362] loop3: detected capacity change from 0 to 512 [ 284.792564][ T7362] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.302: inode has both inline data and extents flags [ 284.809083][ T7362] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.302: couldn't read orphan inode 15 (err -117) [ 284.824585][ T7362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.100593][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.332469][ T7371] loop0: detected capacity change from 0 to 512 [ 286.998326][ T7374] loop3: detected capacity change from 0 to 512 [ 287.007425][ T7374] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.034666][ T7374] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 288.066321][ T7374] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 288.074622][ T7374] EXT4-fs (loop3): orphan cleanup on readonly fs [ 288.082442][ T7374] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.304: Invalid block bitmap block 0 in block_group 0 [ 288.096300][ T7374] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.304: Invalid block bitmap block 0 in block_group 0 [ 288.110070][ T7374] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.304: Invalid block bitmap block 0 in block_group 0 [ 288.123986][ T7374] Quota error (device loop3): write_blk: dquota write failed [ 288.131423][ T7374] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 288.141253][ T7374] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.304: Failed to acquire dquot type 1 [ 288.153897][ T7374] EXT4-fs (loop3): 1 orphan inode deleted [ 288.166029][ T6370] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 288.175058][ T6370] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:21: Failed to release dquot type 1 [ 288.189214][ T7374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.341536][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.102611][ T7382] loop4: detected capacity change from 0 to 512 [ 289.113527][ T7382] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.083142][ T7382] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 290.101727][ T7371] EXT4-fs: error -4 creating inode table initialization thread [ 290.169815][ T7382] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 290.185760][ T7382] EXT4-fs (loop4): orphan cleanup on readonly fs [ 290.193085][ T7371] EXT4-fs (loop0): mount failed [ 290.198970][ T7382] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.305: Invalid block bitmap block 0 in block_group 0 [ 290.215502][ T7382] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.305: Invalid block bitmap block 0 in block_group 0 [ 290.229273][ T7382] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.305: Invalid block bitmap block 0 in block_group 0 [ 290.243124][ T7382] Quota error (device loop4): write_blk: dquota write failed [ 290.250585][ T7382] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 290.260779][ T7382] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.305: Failed to acquire dquot type 1 [ 290.273207][ T7382] EXT4-fs (loop4): 1 orphan inode deleted [ 290.285732][ T36] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 290.304561][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 290.369697][ T7382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.498779][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.549381][ T7429] syzkaller0: entered promiscuous mode [ 302.554917][ T7429] syzkaller0: entered allmulticast mode [ 308.034700][ T7458] loop2: detected capacity change from 0 to 512 [ 308.048097][ T7458] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.727135][ T7458] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 308.743991][ T7458] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 308.752273][ T7458] EXT4-fs (loop2): orphan cleanup on readonly fs [ 308.776355][ T7458] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.325: Invalid block bitmap block 0 in block_group 0 [ 308.791450][ T7458] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.325: Invalid block bitmap block 0 in block_group 0 [ 308.805176][ T7458] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.325: Invalid block bitmap block 0 in block_group 0 [ 308.820993][ T7458] Quota error (device loop2): write_blk: dquota write failed [ 308.828515][ T7458] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 308.838418][ T7458] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.325: Failed to acquire dquot type 1 [ 308.866826][ T7458] EXT4-fs (loop2): 1 orphan inode deleted [ 308.909077][ T2998] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 308.955501][ T2998] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 308.997870][ T7458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.197482][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.921667][ T7475] loop1: detected capacity change from 0 to 512 [ 311.938150][ T7475] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.329: inode has both inline data and extents flags [ 311.951684][ T7475] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.329: couldn't read orphan inode 15 (err -117) [ 311.965602][ T7475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.931398][ T7517] loop4: detected capacity change from 0 to 512 [ 317.945381][ T7517] EXT4-fs: Ignoring removed mblk_io_submit option [ 318.664339][ T7517] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 318.686107][ T7517] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 318.694210][ T7517] EXT4-fs (loop4): orphan cleanup on readonly fs [ 318.701714][ T7517] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.332: Invalid block bitmap block 0 in block_group 0 [ 318.715846][ T7517] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.332: Invalid block bitmap block 0 in block_group 0 [ 318.729796][ T7517] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.332: Invalid block bitmap block 0 in block_group 0 [ 318.743781][ T7517] Quota error (device loop4): write_blk: dquota write failed [ 318.751244][ T7517] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 318.761233][ T7517] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.332: Failed to acquire dquot type 1 [ 318.776491][ T7517] EXT4-fs (loop4): 1 orphan inode deleted [ 318.785082][ T60] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 318.794874][ T60] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 318.837446][ T7517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.970837][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.276686][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.295687][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.303686][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.312260][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.319955][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.082092][ T7537] loop4: detected capacity change from 0 to 512 [ 322.114582][ T7537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 322.149813][ T7537] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.337: invalid indirect mapped block 4294967295 (level 1) [ 322.168028][ T7537] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.337: invalid indirect mapped block 4294967295 (level 1) [ 322.197993][ T7537] EXT4-fs (loop4): 2 truncates cleaned up [ 322.205773][ T7537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.264926][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.273802][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.378994][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.054205][ T7495] syzkaller0: entered promiscuous mode [ 323.068853][ T7495] syzkaller0: entered allmulticast mode [ 323.082278][ T7531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.335'. [ 323.105560][ T7531] netlink: 'syz.2.335': attribute type 4 has an invalid length. [ 323.210042][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.375471][ T52] Bluetooth: hci5: command tx timeout [ 323.676014][ T7556] Bluetooth: MGMT ver 1.23 [ 325.548097][ T52] Bluetooth: hci5: command tx timeout [ 328.065557][ T52] Bluetooth: hci5: command tx timeout [ 330.095663][ T52] Bluetooth: hci5: command tx timeout [ 330.181155][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.195825][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.204540][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.218503][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.226283][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.747330][ T52] Bluetooth: hci2: command tx timeout [ 332.838526][ T7591] loop1: detected capacity change from 0 to 512 [ 332.895759][ T7591] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.349: inode has both inline data and extents flags [ 332.910998][ T7591] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.349: couldn't read orphan inode 15 (err -117) [ 332.924836][ T7591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.825694][ T52] Bluetooth: hci2: command tx timeout [ 336.895456][ T52] Bluetooth: hci2: command tx timeout [ 338.664175][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.725192][ T2998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.229854][ T52] Bluetooth: hci2: command tx timeout [ 340.469990][ T2998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.738105][ T2998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.077318][ T2998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.095796][ T7624] kAFS: unable to lookup cell '(,c¾ûL' [ 344.032040][ T7637] cgroup: fork rejected by pids controller in /syz1 [ 347.182840][ T2998] bond0 (unregistering): Released all slaves [ 347.231189][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 347.263990][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 350.801065][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.819099][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.835623][ T7580] bridge_slave_0: entered allmulticast mode [ 350.846076][ T5950] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 350.854886][ T7580] bridge_slave_0: entered promiscuous mode [ 350.873305][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.885661][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.903081][ T7532] bridge_slave_0: entered allmulticast mode [ 350.917702][ T7532] bridge_slave_0: entered promiscuous mode [ 350.954525][ T2998] hsr_slave_0: left promiscuous mode [ 350.960944][ T2998] hsr_slave_1: left promiscuous mode [ 351.005241][ T2998] veth1_macvtap: left promiscuous mode [ 351.018322][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.041921][ T2998] veth0_macvtap: left promiscuous mode [ 351.047556][ T5950] usb 3-1: config 3 has an invalid interface number: 57 but max is 0 [ 351.057245][ T2998] veth1_vlan: left promiscuous mode [ 351.062666][ T2998] veth0_vlan: left promiscuous mode [ 351.067976][ T5950] usb 3-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 351.080703][ T5950] usb 3-1: config 3 has no interface number 0 [ 351.095719][ T5950] usb 3-1: config 3 interface 57 has no altsetting 0 [ 351.098381][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.116592][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.124723][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.134213][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.142682][ T5950] usb 3-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 351.153133][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.171234][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.180545][ T5950] usb 3-1: Product: syz [ 351.184739][ T5950] usb 3-1: Manufacturer: syz [ 351.189439][ T5950] usb 3-1: SerialNumber: syz [ 351.474882][ T5950] usb 3-1: USB disconnect, device number 2 [ 352.502150][ T7667] cgroup: fork rejected by pids controller in /syz4 [ 353.215628][ T5822] Bluetooth: hci1: command tx timeout [ 353.659879][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.675600][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.682856][ T7580] bridge_slave_1: entered allmulticast mode [ 353.704372][ T7580] bridge_slave_1: entered promiscuous mode [ 353.712107][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.735575][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.742804][ T7532] bridge_slave_1: entered allmulticast mode [ 353.758830][ T7532] bridge_slave_1: entered promiscuous mode [ 354.328829][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.347716][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.373659][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.431561][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.511143][ T7580] team0: Port device team_slave_0 added [ 354.561896][ T7532] team0: Port device team_slave_0 added [ 354.571847][ T7580] team0: Port device team_slave_1 added [ 354.635654][ T7532] team0: Port device team_slave_1 added [ 354.738420][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.755407][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.782579][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.848837][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.867481][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.906148][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.977672][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.987461][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.994476][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.004454][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.008171][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.039666][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.041331][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.059090][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.109121][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.121429][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.150648][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.295406][ T5822] Bluetooth: hci1: command tx timeout [ 355.317507][ T7580] hsr_slave_0: entered promiscuous mode [ 355.338097][ T7580] hsr_slave_1: entered promiscuous mode [ 356.769884][ T7532] hsr_slave_0: entered promiscuous mode [ 356.781978][ T7532] hsr_slave_1: entered promiscuous mode [ 356.792612][ T7532] debugfs: 'hsr0' already exists in 'hsr' [ 356.798783][ T7532] Cannot create hsr debugfs directory [ 356.955437][ T5907] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 356.986985][ T2998] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.109447][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 357.129364][ T5907] usb 3-1: config 3 has an invalid interface number: 57 but max is 0 [ 357.137898][ T5822] Bluetooth: hci3: command tx timeout [ 357.146844][ T2998] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.157781][ T5907] usb 3-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 357.171695][ T5907] usb 3-1: config 3 has no interface number 0 [ 357.184938][ T5907] usb 3-1: config 3 interface 57 has no altsetting 0 [ 357.195425][ T5907] usb 3-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 357.204507][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.213641][ T5907] usb 3-1: Product: syz [ 357.225415][ T5907] usb 3-1: Manufacturer: syz [ 357.230145][ T5907] usb 3-1: SerialNumber: syz [ 357.336818][ T2998] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.375594][ T5822] Bluetooth: hci1: command tx timeout [ 357.438223][ T2998] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.486398][ T5907] usb 3-1: USB disconnect, device number 3 [ 357.583805][ T7664] chnl_net:caif_netlink_parms(): no params data found [ 357.869319][ T7532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 357.900123][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.907984][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.915369][ T7664] bridge_slave_0: entered allmulticast mode [ 357.923314][ T7664] bridge_slave_0: entered promiscuous mode [ 357.949465][ T7532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.067826][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.078057][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.100553][ T7664] bridge_slave_1: entered allmulticast mode [ 358.108675][ T7664] bridge_slave_1: entered promiscuous mode [ 358.126323][ T7683] chnl_net:caif_netlink_parms(): no params data found [ 358.149135][ T7532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.282918][ T7532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.352177][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.450131][ T2998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.513184][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.699135][ T7664] team0: Port device team_slave_0 added [ 358.738973][ T2998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.792094][ T7664] team0: Port device team_slave_1 added [ 358.837823][ T7580] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.304075][ T52] Bluetooth: hci1: command tx timeout [ 360.309691][ T5822] Bluetooth: hci3: command tx timeout [ 360.361465][ T7580] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 360.408730][ T2998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.445235][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.465379][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.515469][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.526841][ T7580] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 360.569130][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.576617][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.603129][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.615042][ T7580] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 360.638762][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.646451][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.653659][ T7683] bridge_slave_0: entered allmulticast mode [ 360.666364][ T7683] bridge_slave_0: entered promiscuous mode [ 360.696901][ T2998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.728047][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.736306][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.743997][ T7683] bridge_slave_1: entered allmulticast mode [ 360.757816][ T7683] bridge_slave_1: entered promiscuous mode [ 360.892970][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.911025][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.944170][ T7664] hsr_slave_0: entered promiscuous mode [ 360.951284][ T7664] hsr_slave_1: entered promiscuous mode [ 360.958487][ T7664] debugfs: 'hsr0' already exists in 'hsr' [ 360.964244][ T7664] Cannot create hsr debugfs directory [ 361.028210][ T7683] team0: Port device team_slave_0 added [ 361.079662][ T7683] team0: Port device team_slave_1 added [ 361.180245][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.187693][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.213953][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.257135][ T2998] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.278984][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.286175][ T5950] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 361.287227][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.321338][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.370692][ T2998] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.439553][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 361.447569][ T5950] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 361.453125][ T2998] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.457041][ T5950] usb 3-1: config 0 has no interface number 0 [ 361.473204][ T5950] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.487724][ T5950] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 361.501257][ T5950] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 361.512811][ T5950] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.526402][ T5950] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 361.536421][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.554387][ T5950] usb 3-1: config 0 descriptor?? [ 361.572199][ T5950] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 361.617271][ T7683] hsr_slave_0: entered promiscuous mode [ 361.623920][ T7683] hsr_slave_1: entered promiscuous mode [ 361.630693][ T7683] debugfs: 'hsr0' already exists in 'hsr' [ 361.637042][ T7683] Cannot create hsr debugfs directory [ 361.664852][ T2998] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.859638][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.874735][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 361.882462][ T5950] usb 3-1: USB disconnect, device number 4 [ 361.944165][ T5950] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 361.946939][ T7747] ldusb: No device or device unplugged -19 [ 362.335455][ T52] Bluetooth: hci3: command tx timeout [ 362.905050][ T2998] bond0 (unregistering): Released all slaves [ 363.096522][ T7766] Bluetooth: MGMT ver 1.23 [ 363.751921][ T2998] bond0 (unregistering): Released all slaves [ 363.969949][ T7770] No source specified [ 364.086653][ T2998] bond0 (unregistering): Released all slaves [ 364.268608][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.373977][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.415804][ T52] Bluetooth: hci3: command tx timeout [ 364.471476][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.478715][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.548959][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.556208][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.683080][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.917477][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.924685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.017795][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.025008][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.531814][ T2998] hsr_slave_0: left promiscuous mode [ 365.576224][ T2998] hsr_slave_1: left promiscuous mode [ 365.601078][ T2998] hsr_slave_0: left promiscuous mode [ 365.608375][ T2998] hsr_slave_1: left promiscuous mode [ 365.620940][ T2998] hsr_slave_0: left promiscuous mode [ 365.646077][ T2998] hsr_slave_1: left promiscuous mode [ 365.739660][ T2998] veth1_macvtap: left promiscuous mode [ 365.745246][ T2998] veth0_macvtap: left promiscuous mode [ 365.753760][ T2998] veth1_vlan: left promiscuous mode [ 365.761433][ T2998] veth0_vlan: left promiscuous mode [ 365.769156][ T2998] veth1_macvtap: left promiscuous mode [ 365.774791][ T2998] veth0_macvtap: left promiscuous mode [ 365.781272][ T2998] veth1_vlan: left promiscuous mode [ 365.788261][ T2998] veth0_vlan: left promiscuous mode [ 365.797005][ T2998] veth1_macvtap: left promiscuous mode [ 365.803121][ T2998] veth0_macvtap: left promiscuous mode [ 365.809186][ T2998] veth1_vlan: left promiscuous mode [ 365.814557][ T2998] veth0_vlan: left promiscuous mode [ 370.219012][ T7805] kAFS: unable to lookup cell '(,c¾ûL' [ 371.622519][ T7664] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 371.644109][ T7664] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 371.719869][ T7664] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 371.750458][ T7664] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.469214][ T7683] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.520865][ T7683] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.549829][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.576625][ T7683] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.649288][ T7683] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.871644][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.989269][ T7664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.099664][ T7664] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.207280][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.214595][ T7618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.255100][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.262343][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.343214][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.531092][ T7683] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.543457][ T7532] veth0_vlan: entered promiscuous mode [ 374.572208][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.579486][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.630208][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.637468][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.657277][ T7532] veth1_vlan: entered promiscuous mode [ 374.824097][ T7580] veth0_vlan: entered promiscuous mode [ 374.877122][ T7532] veth0_macvtap: entered promiscuous mode [ 375.114752][ T7532] veth1_macvtap: entered promiscuous mode [ 376.076185][ T7580] veth1_vlan: entered promiscuous mode [ 376.119475][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.207915][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.264015][ T2998] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.297662][ T7580] veth0_macvtap: entered promiscuous mode [ 376.313122][ T2998] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.329759][ T2998] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.349272][ T7580] veth1_macvtap: entered promiscuous mode [ 376.370875][ T2998] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.394655][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.450997][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.471212][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.620003][ T6006] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.657989][ T5999] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.696723][ T6006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.697697][ T5999] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.704615][ T6006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.733942][ T5999] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.843439][ T6370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.854141][ T6370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.865054][ T7683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.016974][ T7664] veth0_vlan: entered promiscuous mode [ 377.077091][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.100531][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.139178][ T7876] loop5: detected capacity change from 0 to 128 [ 377.202779][ T7876] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.234946][ T7664] veth1_vlan: entered promiscuous mode [ 377.306293][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.314156][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.335379][ T7876] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 377.432448][ T7664] veth0_macvtap: entered promiscuous mode [ 377.494958][ T7664] veth1_macvtap: entered promiscuous mode [ 378.386624][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.457926][ T7532] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.501342][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.615552][ T7376] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.624319][ T7376] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.704393][ T7683] veth0_vlan: entered promiscuous mode [ 378.733467][ T7376] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.775933][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.810362][ T7683] veth1_vlan: entered promiscuous mode [ 378.947430][ T7683] veth0_macvtap: entered promiscuous mode [ 380.452589][ T7683] veth1_macvtap: entered promiscuous mode [ 380.657771][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.676350][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.700048][ T136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.758311][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.798068][ T136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.820701][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.863942][ T136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.967343][ T136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.011161][ T7376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.070801][ T7376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.369391][ T5953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.413522][ T5953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.515455][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.552622][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.091610][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.098597][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.388351][ T37] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 390.017186][ T37] usb 2-1: device descriptor read/all, error -71 [ 390.214496][ T7980] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 390.309983][ T7982] No source specified [ 395.055405][ T37] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 396.649986][ T37] usb 5-1: device descriptor read/all, error -71 [ 396.779573][ T8051] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 396.955374][ T6066] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 397.137471][ T6066] usb 6-1: unable to get BOS descriptor or descriptor too short [ 397.175441][ T6066] usb 6-1: config 3 has an invalid interface number: 57 but max is 0 [ 397.183564][ T6066] usb 6-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 397.248775][ T6066] usb 6-1: config 3 has no interface number 0 [ 397.254948][ T6066] usb 6-1: config 3 interface 57 has no altsetting 0 [ 397.326011][ T6066] usb 6-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 397.362876][ T6066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.423765][ T6066] usb 6-1: Product: syz [ 397.461284][ T6066] usb 6-1: Manufacturer: syz [ 397.473508][ T6066] usb 6-1: SerialNumber: syz [ 398.344978][ T6066] usb 6-1: USB disconnect, device number 2 [ 401.778424][ T6066] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 405.785407][ T5936] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 408.051289][ T5936] usb 5-1: device descriptor read/all, error -71 [ 410.039033][ T8145] kAFS: unable to lookup cell '(,c¾ûL' [ 412.415597][ T5936] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 412.589586][ T5936] usb 6-1: unable to get BOS descriptor or descriptor too short [ 412.610481][ T5936] usb 6-1: config 3 has an invalid interface number: 57 but max is 0 [ 412.636424][ T5936] usb 6-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 412.659593][ T5936] usb 6-1: config 3 has no interface number 0 [ 412.678809][ T5936] usb 6-1: config 3 interface 57 has no altsetting 0 [ 412.703558][ T5936] usb 6-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 412.725402][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.733509][ T5936] usb 6-1: Product: syz [ 412.753912][ T5936] usb 6-1: Manufacturer: syz [ 412.772376][ T5936] usb 6-1: SerialNumber: syz [ 412.915411][ T8168] kAFS: unable to lookup cell '(,c¾ûL' [ 413.044011][ T5936] usb 6-1: USB disconnect, device number 3 [ 413.210408][ T5893] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 413.377246][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 413.404951][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 413.431561][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 413.445079][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 413.466062][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 413.480986][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 413.521667][ T5893] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 413.541219][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.739486][ T5893] usb 3-1: Product: syz [ 413.743732][ T5893] usb 3-1: Manufacturer: syz [ 413.748545][ T5893] usb 3-1: SerialNumber: syz [ 413.760059][ T5893] usb 3-1: config 0 descriptor?? [ 413.765885][ T8170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 413.773346][ T8170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 413.845188][ T5893] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 413.894051][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 414.093345][ C1] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 414.104243][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 414.143044][ T5936] usb 3-1: USB disconnect, device number 6 [ 420.039138][ T8198] No source specified [ 420.748131][ T8207] No source specified [ 424.377730][ T8224] loop1: detected capacity change from 0 to 512 [ 424.390871][ T8224] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.252100][ T8224] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 425.274924][ T8224] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 425.283029][ T8224] EXT4-fs (loop1): orphan cleanup on readonly fs [ 425.290720][ T8224] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.446: Invalid block bitmap block 0 in block_group 0 [ 425.304761][ T8224] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.446: Invalid block bitmap block 0 in block_group 0 [ 425.318661][ T8224] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.446: Invalid block bitmap block 0 in block_group 0 [ 425.332656][ T8224] Quota error (device loop1): write_blk: dquota write failed [ 425.340167][ T8224] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 425.350219][ T8224] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.446: Failed to acquire dquot type 1 [ 425.366132][ T8224] EXT4-fs (loop1): 1 orphan inode deleted [ 425.385520][ T2947] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 425.394638][ T2947] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 425.436535][ T8224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.571094][ T7664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.332864][ T8262] No source specified [ 433.826823][ T5972] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 434.025714][ T5972] usb 2-1: Using ep0 maxpacket: 8 [ 434.037092][ T5972] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 434.065454][ T5972] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.778378][ T5972] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.788507][ T5972] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.800419][ T5972] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.813775][ T5972] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 434.829395][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.042235][ T8297] loop2: detected capacity change from 0 to 128 [ 435.061726][ T5972] usb 2-1: GET_CAPABILITIES returned 0 [ 435.082954][ T5972] usbtmc 2-1:16.0: can't read capabilities [ 435.680427][ T8303] loop5: detected capacity change from 0 to 512 [ 435.694680][ T8303] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.428154][ T8303] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 436.442592][ T8303] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 436.450731][ T8303] EXT4-fs (loop5): orphan cleanup on readonly fs [ 436.458137][ T8303] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.460: Invalid block bitmap block 0 in block_group 0 [ 436.476205][ T8303] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.460: Invalid block bitmap block 0 in block_group 0 [ 436.490063][ T8303] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.460: Invalid block bitmap block 0 in block_group 0 [ 436.504027][ T8303] Quota error (device loop5): write_blk: dquota write failed [ 436.511577][ T8303] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 436.521554][ T8303] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.460: Failed to acquire dquot type 1 [ 436.547117][ T8303] EXT4-fs (loop5): 1 orphan inode deleted [ 436.558172][ T5989] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 436.612891][ T8297] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.625705][ T5972] usb 2-1: USB disconnect, device number 4 [ 436.638944][ T5989] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:17: Failed to release dquot type 1 [ 436.725727][ T8297] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 436.746222][ T8303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 436.887631][ T7532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.109531][ T5820] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 441.775483][ T5937] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 441.955399][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 441.970179][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 441.995621][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 442.025564][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 442.065414][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 442.114456][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 442.179615][ T5937] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 442.206184][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.234612][ T5937] usb 5-1: Product: syz [ 442.239277][ T5937] usb 5-1: Manufacturer: syz [ 442.243946][ T5937] usb 5-1: SerialNumber: syz [ 442.285542][ T5937] usb 5-1: config 0 descriptor?? [ 442.303565][ T8337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.315015][ T8337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.380339][ T5937] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 442.431587][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 442.529435][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 442.733323][ T5886] usb 5-1: USB disconnect, device number 6 [ 442.733333][ C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 443.734586][ T8360] loop5: detected capacity change from 0 to 128 [ 444.438338][ T8360] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 444.519558][ T8360] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 445.222020][ T8368] loop4: detected capacity change from 0 to 512 [ 445.229403][ T8368] EXT4-fs: Ignoring removed mblk_io_submit option [ 445.516397][ T8368] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 445.529071][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.537851][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.546067][ T8368] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 445.554442][ T8368] EXT4-fs (loop4): orphan cleanup on readonly fs [ 445.562750][ T8368] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.471: Invalid block bitmap block 0 in block_group 0 [ 445.576896][ T8368] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.471: Invalid block bitmap block 0 in block_group 0 [ 445.590654][ T8368] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.471: Invalid block bitmap block 0 in block_group 0 [ 445.604491][ T8368] Quota error (device loop4): write_blk: dquota write failed [ 445.612015][ T8368] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 445.621934][ T8368] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.471: Failed to acquire dquot type 1 [ 445.638947][ T8368] EXT4-fs (loop4): 1 orphan inode deleted [ 445.675594][ T12] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 445.684629][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 445.877239][ T8368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 446.228076][ T7683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.670411][ T8387] No source specified [ 446.688328][ T7532] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.585761][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 453.065186][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 455.452911][ T8445] kAFS: unable to lookup cell '(,c¾ûL' [ 456.175627][ T5907] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 456.367476][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 456.397824][ T5907] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 456.425455][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.488920][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.873415][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.974214][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.105035][ T5907] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.173159][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.452236][ T5907] usb 5-1: GET_CAPABILITIES returned 0 [ 458.472682][ T5907] usbtmc 5-1:16.0: can't read capabilities [ 459.189009][ T8449] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 459.190550][ T6904] usb 5-1: USB disconnect, device number 7 [ 459.794828][ T8481] loop6: detected capacity change from 0 to 4096 [ 459.864904][ T8481] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 459.886491][ T8481] EXT4-fs (loop6): Test dummy encryption mode enabled [ 459.966775][ T8481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.138302][ T8481] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 461.305514][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.439690][ T8541] loop6: detected capacity change from 0 to 128 [ 467.459339][ T8541] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 467.473144][ T8541] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 467.686264][ T5972] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 467.705333][ T8549] loop4: detected capacity change from 0 to 512 [ 467.720414][ T7580] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.738522][ T8549] EXT4-fs: Ignoring removed mblk_io_submit option [ 467.768815][ T8549] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 467.853578][ T8549] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 467.880514][ T5972] usb 6-1: unable to get BOS descriptor or descriptor too short [ 467.926192][ T5972] usb 6-1: config 3 has an invalid interface number: 57 but max is 0 [ 467.934423][ T5972] usb 6-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 467.956672][ T8549] EXT4-fs (loop4): orphan cleanup on readonly fs [ 467.999239][ T8549] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.500: Invalid block bitmap block 0 in block_group 0 [ 468.015225][ T5972] usb 6-1: config 3 has no interface number 0 [ 468.049323][ T8549] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.500: Invalid block bitmap block 0 in block_group 0 [ 468.065472][ T5972] usb 6-1: config 3 interface 57 has no altsetting 0 [ 468.076188][ T5972] usb 6-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 468.077543][ T8549] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.500: Invalid block bitmap block 0 in block_group 0 [ 468.120178][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.162975][ T5972] usb 6-1: Product: syz [ 468.167708][ T8549] Quota error (device loop4): write_blk: dquota write failed [ 468.182764][ T5972] usb 6-1: Manufacturer: syz [ 468.200187][ T5972] usb 6-1: SerialNumber: syz [ 468.212578][ T8549] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 468.253134][ T8549] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.500: Failed to acquire dquot type 1 [ 468.314472][ T8549] EXT4-fs (loop4): 1 orphan inode deleted [ 468.326844][ T136] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 468.345882][ T136] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 468.395138][ T8549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 468.540978][ T5972] usb 6-1: USB disconnect, device number 4 [ 468.605865][ T8572] No source specified [ 468.769278][ T7683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.843949][ T8583] loop1: detected capacity change from 0 to 4096 [ 469.949116][ T8583] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 471.442475][ T8583] EXT4-fs (loop1): Test dummy encryption mode enabled [ 471.510801][ T8583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.890015][ T7664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.533429][ T8612] loop1: detected capacity change from 0 to 512 [ 473.576299][ T8612] EXT4-fs: Ignoring removed mblk_io_submit option [ 473.620005][ T8612] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 474.516884][ T8612] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 474.526650][ T8612] EXT4-fs (loop1): orphan cleanup on readonly fs [ 474.619835][ T8612] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.514: Invalid block bitmap block 0 in block_group 0 [ 474.708144][ T8612] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.514: Invalid block bitmap block 0 in block_group 0 [ 474.743476][ T8612] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.514: Invalid block bitmap block 0 in block_group 0 [ 474.759693][ T8612] Quota error (device loop1): write_blk: dquota write failed [ 474.767663][ T8612] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 474.777918][ T8612] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.514: Failed to acquire dquot type 1 [ 474.790621][ T8612] EXT4-fs (loop1): 1 orphan inode deleted [ 474.809964][ T5989] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 474.822968][ T5989] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:17: Failed to release dquot type 1 [ 474.867489][ T8612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 474.970388][ T8629] loop2: detected capacity change from 0 to 128 [ 475.074642][ T7664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.539033][ T8629] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.606655][ T8629] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.181909][ T8648] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 478.357638][ T5820] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.578563][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 478.584672][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 482.416084][ T8694] No source specified [ 483.474954][ T8647] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 485.165928][ T8647] usb 7-1: Using ep0 maxpacket: 8 [ 485.313974][ T8647] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 485.339154][ T8647] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.417323][ T8647] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 485.474160][ T8647] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.535401][ T8647] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.625405][ T8647] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 485.634554][ T8647] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.736317][ T8647] usb 7-1: can't set config #16, error -71 [ 485.775802][ T8647] usb 7-1: USB disconnect, device number 3 [ 489.987669][ T8737] cgroup: fork rejected by pids controller in /syz2 [ 490.272146][ T8744] loop6: detected capacity change from 0 to 128 [ 490.369898][ T8748] kAFS: unable to lookup cell '(,c¾ûL' [ 490.379932][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.540'. [ 490.396454][ T8744] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 490.419470][ T2998] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.491354][ T8744] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.701027][ T2998] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.231780][ T7580] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.328680][ T2998] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.500014][ T2998] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.521912][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.533347][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.541413][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.549489][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.559697][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.745425][ T6830] Bluetooth: hci3: command tx timeout [ 497.988177][ T2998] bridge_slave_1: left allmulticast mode [ 497.993887][ T2998] bridge_slave_1: left promiscuous mode [ 498.030173][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.102114][ T2998] bridge_slave_0: left allmulticast mode [ 498.125778][ T2998] bridge_slave_0: left promiscuous mode [ 498.165669][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.835324][ T6830] Bluetooth: hci3: command tx timeout [ 499.598887][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.611965][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.627188][ T2998] bond0 (unregistering): Released all slaves [ 501.279915][ T6830] Bluetooth: hci3: command tx timeout [ 502.470842][ T2998] hsr_slave_0: left promiscuous mode [ 502.490858][ T2998] hsr_slave_1: left promiscuous mode [ 502.506225][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.513696][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.546456][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.553991][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.762632][ T2998] veth1_macvtap: left promiscuous mode [ 502.818434][ T2998] veth0_macvtap: left promiscuous mode [ 502.842798][ T2998] veth1_vlan: left promiscuous mode [ 503.825785][ T6830] Bluetooth: hci3: command tx timeout [ 503.863553][ T2998] veth0_vlan: left promiscuous mode [ 504.880266][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 504.903726][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 504.911598][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 504.922433][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 504.930256][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.477217][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 506.528185][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 506.585748][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.604247][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.992700][ T5831] Bluetooth: hci0: command tx timeout [ 509.055376][ T5831] Bluetooth: hci0: command tx timeout [ 509.069834][ T8767] chnl_net:caif_netlink_parms(): no params data found [ 509.305471][ T5972] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 509.479057][ T5972] usb 7-1: unable to get BOS descriptor or descriptor too short [ 509.500627][ T5972] usb 7-1: config 3 has an invalid interface number: 57 but max is 0 [ 509.529372][ T5972] usb 7-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 509.560438][ T5972] usb 7-1: config 3 has no interface number 0 [ 509.590812][ T5972] usb 7-1: config 3 interface 57 has no altsetting 0 [ 509.618798][ T5972] usb 7-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 509.640616][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.649227][ T5972] usb 7-1: Product: syz [ 509.653843][ T5972] usb 7-1: Manufacturer: syz [ 509.658994][ T5972] usb 7-1: SerialNumber: syz [ 509.703201][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.726358][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.733780][ T8767] bridge_slave_0: entered allmulticast mode [ 509.744349][ T8767] bridge_slave_0: entered promiscuous mode [ 509.787139][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.794462][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.803244][ T8767] bridge_slave_1: entered allmulticast mode [ 509.812489][ T8767] bridge_slave_1: entered promiscuous mode [ 509.950177][ T5972] usb 7-1: USB disconnect, device number 4 [ 510.045088][ T8767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.108802][ T8767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.179746][ T6830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 510.190409][ T6830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 510.201710][ T6830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 510.209853][ T6830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 510.217619][ T6830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.316598][ T8880] No source specified [ 510.594292][ T2998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.641670][ T8767] team0: Port device team_slave_0 added [ 510.667429][ T8767] team0: Port device team_slave_1 added [ 511.158936][ T6830] Bluetooth: hci0: command tx timeout [ 511.490919][ T2998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.719829][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.728141][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.787157][ T8767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.047764][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.059011][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.337893][ T8767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.339408][ T6830] Bluetooth: hci1: command tx timeout [ 512.487709][ T2998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.688267][ T7946] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 512.793836][ T2998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.922257][ T7946] usb 7-1: unable to get BOS descriptor or descriptor too short [ 512.937791][ T7946] usb 7-1: config 3 has an invalid interface number: 57 but max is 0 [ 512.947432][ T7946] usb 7-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 512.980152][ T7946] usb 7-1: config 3 has no interface number 0 [ 512.988384][ T8832] chnl_net:caif_netlink_parms(): no params data found [ 512.996419][ T7946] usb 7-1: config 3 interface 57 has no altsetting 0 [ 514.008025][ T6830] Bluetooth: hci0: command tx timeout [ 514.026186][ T8767] hsr_slave_0: entered promiscuous mode [ 514.435497][ T6830] Bluetooth: hci1: command tx timeout [ 515.035897][ T7946] usb 7-1: string descriptor 0 read error: -71 [ 515.044375][ T8767] hsr_slave_1: entered promiscuous mode [ 515.055157][ T8767] debugfs: 'hsr0' already exists in 'hsr' [ 515.066858][ T7946] usb 7-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 515.075446][ T8767] Cannot create hsr debugfs directory [ 515.116640][ T7946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.195447][ T7946] usb 7-1: can't set config #3, error -71 [ 515.212708][ T7946] usb 7-1: USB disconnect, device number 5 [ 515.377260][ T8919] No source specified [ 515.531789][ T8921] No source specified [ 515.711627][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.720527][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.730999][ T8832] bridge_slave_0: entered allmulticast mode [ 515.758777][ T8832] bridge_slave_0: entered promiscuous mode [ 515.958510][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.975512][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.982790][ T8832] bridge_slave_1: entered allmulticast mode [ 515.990475][ T8832] bridge_slave_1: entered promiscuous mode [ 516.495759][ T6830] Bluetooth: hci1: command tx timeout [ 516.883224][ T8832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.943360][ T8832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.939582][ T6830] Bluetooth: hci1: command tx timeout [ 519.507245][ T8875] chnl_net:caif_netlink_parms(): no params data found [ 519.515377][ T6066] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 519.640778][ T2998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.690842][ T8832] team0: Port device team_slave_0 added [ 519.698035][ T6066] usb 7-1: unable to get BOS descriptor or descriptor too short [ 519.718065][ T6066] usb 7-1: config 3 has an invalid interface number: 57 but max is 0 [ 519.735306][ T6066] usb 7-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 520.607199][ T8832] team0: Port device team_slave_1 added [ 520.748774][ T6066] usb 7-1: config 3 has no interface number 0 [ 520.755003][ T6066] usb 7-1: config 3 interface 57 has no altsetting 0 [ 520.770124][ T6066] usb 7-1: string descriptor 0 read error: -71 [ 520.776716][ T6066] usb 7-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 520.785839][ T6066] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.806621][ T6066] usb 7-1: can't set config #3, error -71 [ 520.814314][ T6066] usb 7-1: USB disconnect, device number 6 [ 520.988036][ T2998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.514216][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.521836][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.548423][ T8832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.695480][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.702487][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.777018][ T8832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.827813][ T2998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.036627][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.045542][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.052852][ T8875] bridge_slave_0: entered allmulticast mode [ 523.062326][ T8875] bridge_slave_0: entered promiscuous mode [ 523.116718][ T2998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.155210][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.164275][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.172421][ T8875] bridge_slave_1: entered allmulticast mode [ 523.181496][ T8875] bridge_slave_1: entered promiscuous mode [ 523.374632][ T8832] hsr_slave_0: entered promiscuous mode [ 523.391779][ T8832] hsr_slave_1: entered promiscuous mode [ 523.398828][ T8832] debugfs: 'hsr0' already exists in 'hsr' [ 524.885527][ T8832] Cannot create hsr debugfs directory [ 525.036175][ T8875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.166933][ T8875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.467353][ T8875] team0: Port device team_slave_0 added [ 525.572991][ T8875] team0: Port device team_slave_1 added [ 525.634495][ T8767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 525.724012][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.734137][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.775477][ T8875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.794033][ T2998] bridge_slave_1: left allmulticast mode [ 525.806823][ T2998] bridge_slave_1: left promiscuous mode [ 525.822924][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.848004][ T2998] bridge_slave_0: left allmulticast mode [ 525.872325][ T2998] bridge_slave_0: left promiscuous mode [ 525.905756][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.908667][ T2998] bridge_slave_1: left allmulticast mode [ 526.914462][ T2998] bridge_slave_1: left promiscuous mode [ 526.920598][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.940960][ T2998] bridge_slave_0: left allmulticast mode [ 526.953397][ T2998] bridge_slave_0: left promiscuous mode [ 526.959847][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.333190][ T8972] No source specified [ 527.444698][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.463344][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.481866][ T2998] bond0 (unregistering): Released all slaves [ 527.861059][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.934125][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.951284][ T2998] bond0 (unregistering): Released all slaves [ 527.976026][ T8767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 528.053944][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.062477][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.093794][ T8875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.385440][ T8767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 528.472179][ T8767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 528.673956][ T8875] hsr_slave_0: entered promiscuous mode [ 528.682374][ T8875] hsr_slave_1: entered promiscuous mode [ 528.688944][ T8875] debugfs: 'hsr0' already exists in 'hsr' [ 528.694695][ T8875] Cannot create hsr debugfs directory [ 528.767636][ T8988] No source specified [ 529.227257][ T2998] hsr_slave_0: left promiscuous mode [ 529.237771][ T2998] hsr_slave_1: left promiscuous mode [ 529.335820][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.335923][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.358174][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.358201][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.725440][ T2998] hsr_slave_0: left promiscuous mode [ 529.755840][ T2998] hsr_slave_1: left promiscuous mode [ 529.757390][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.757413][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.760867][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.760885][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.794397][ T2998] veth1_macvtap: left promiscuous mode [ 529.794473][ T2998] veth0_macvtap: left promiscuous mode [ 529.794668][ T2998] veth1_vlan: left promiscuous mode [ 529.794767][ T2998] veth0_vlan: left promiscuous mode [ 529.809194][ T2998] veth1_macvtap: left promiscuous mode [ 529.809247][ T2998] veth0_macvtap: left promiscuous mode [ 529.809404][ T2998] veth1_vlan: left promiscuous mode [ 529.809708][ T2998] veth0_vlan: left promiscuous mode [ 530.955985][ T8996] cgroup: fork rejected by pids controller in /syz5 [ 531.861334][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 531.907867][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 532.591193][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 532.628283][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 533.299277][ T8767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.359290][ T8832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 534.407656][ T8832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 534.453487][ T8832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 534.524255][ T8832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 534.592025][ T8767] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.705051][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.712322][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.810603][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.817876][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.441601][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 535.452970][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 535.521885][ T8832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.545843][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 535.554469][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 535.562358][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 535.709197][ T8875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 535.720908][ T8875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 535.743806][ T8875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 535.916529][ T8875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 536.238539][ T2998] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.710222][ T8832] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.791398][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.798665][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.836476][ T2998] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.876715][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.883962][ T6252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.922818][ T8767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.960007][ T2998] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.101435][ T2998] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.695462][ T6830] Bluetooth: hci4: command tx timeout [ 537.713665][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.854143][ T2998] bridge_slave_1: left allmulticast mode [ 537.862411][ T2998] bridge_slave_1: left promiscuous mode [ 537.868616][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.879309][ T2998] bridge_slave_0: left allmulticast mode [ 537.884991][ T2998] bridge_slave_0: left promiscuous mode [ 537.892261][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.729938][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.749785][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.761033][ T2998] bond0 (unregistering): Released all slaves [ 538.894143][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 539.808131][ T6830] Bluetooth: hci4: command tx timeout [ 539.918278][ T8875] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.107425][ T8832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.166324][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.173707][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.283933][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.294224][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.306754][ T9016] bridge_slave_0: entered allmulticast mode [ 540.314623][ T9016] bridge_slave_0: entered promiscuous mode [ 540.324785][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.331984][ T6252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.347695][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.359750][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.372612][ T9016] bridge_slave_1: entered allmulticast mode [ 540.384034][ T9016] bridge_slave_1: entered promiscuous mode [ 540.454069][ T2998] hsr_slave_0: left promiscuous mode [ 540.461206][ T2998] hsr_slave_1: left promiscuous mode [ 540.467918][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.479537][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.490226][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.501712][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.525202][ T2998] veth1_macvtap: left promiscuous mode [ 540.531092][ T2998] veth0_macvtap: left promiscuous mode [ 540.537352][ T2998] veth1_vlan: left promiscuous mode [ 540.542857][ T2998] veth0_vlan: left promiscuous mode [ 540.979255][ T9061] binder: 9060:9061 ioctl c0306201 200000000180 returned -14 [ 541.794408][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 541.856089][ T6830] Bluetooth: hci4: command tx timeout [ 542.060241][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 542.818822][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.894169][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.475099][ T9016] team0: Port device team_slave_0 added [ 543.650251][ T9016] team0: Port device team_slave_1 added [ 543.802935][ T8832] veth0_vlan: entered promiscuous mode [ 543.935558][ T6830] Bluetooth: hci4: command tx timeout [ 543.970274][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.977701][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.005209][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.033218][ T8832] veth1_vlan: entered promiscuous mode [ 544.102961][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.110106][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.136182][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.140668][ T8832] veth0_macvtap: entered promiscuous mode [ 545.164920][ T9016] hsr_slave_0: entered promiscuous mode [ 545.173039][ T9016] hsr_slave_1: entered promiscuous mode [ 545.180149][ T9016] debugfs: 'hsr0' already exists in 'hsr' [ 545.186836][ T9016] Cannot create hsr debugfs directory [ 545.223948][ T8832] veth1_macvtap: entered promiscuous mode [ 545.253024][ T8767] veth0_vlan: entered promiscuous mode [ 545.363463][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.395855][ T8767] veth1_vlan: entered promiscuous mode [ 545.430183][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.506883][ T1985] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.537860][ T1985] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.563128][ T1985] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.610244][ T1985] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.723326][ T8767] veth0_macvtap: entered promiscuous mode [ 545.806967][ T8767] veth1_macvtap: entered promiscuous mode [ 545.916419][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.932092][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.978240][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.014095][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.128656][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.157592][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.222753][ T5947] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.232193][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.240508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.250634][ T7376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.900831][ T9084] cgroup: fork rejected by pids controller in /syz6 [ 547.951138][ T9016] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 547.990243][ T9016] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 548.048065][ T9016] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 548.100257][ T9016] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 548.713557][ T8875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.730257][ T1985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.802930][ T1985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.964501][ T1985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.976870][ T1985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.123387][ T8875] veth0_vlan: entered promiscuous mode [ 549.397317][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.415679][ T8875] veth1_vlan: entered promiscuous mode [ 549.547503][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.590693][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.597940][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.974125][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.981385][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.308926][ T8875] veth0_macvtap: entered promiscuous mode [ 550.342384][ T8875] veth1_macvtap: entered promiscuous mode [ 550.462906][ T5988] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.708388][ T5988] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.778290][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.822738][ T5988] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.859751][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.915970][ T2998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.995625][ T5827] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 551.087123][ T5988] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.508430][ T5827] usb 5-1: unable to get BOS descriptor or descriptor too short [ 551.538591][ T5827] usb 5-1: config 3 has an invalid interface number: 57 but max is 0 [ 551.569972][ T2998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.592376][ T5827] usb 5-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 551.615404][ T2998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.633727][ T2998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.677317][ T5827] usb 5-1: config 3 has no interface number 0 [ 551.717185][ T5827] usb 5-1: config 3 interface 57 has no altsetting 0 [ 551.766871][ T5827] usb 5-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 551.785386][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.836698][ T5827] usb 5-1: Product: syz [ 551.850718][ T5827] usb 5-1: Manufacturer: syz [ 551.853580][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 551.866152][ T5827] usb 5-1: SerialNumber: syz [ 551.868539][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 551.903468][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 551.919781][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 551.927998][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.230881][ T7376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.261912][ T7376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.468261][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.941926][ T5827] usb 5-1: USB disconnect, device number 8 [ 553.004885][ T9132] ./cgroup: Can't lookup blockdev [ 553.279514][ T5988] bridge_slave_1: left allmulticast mode [ 553.293050][ T5988] bridge_slave_1: left promiscuous mode [ 553.326080][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.420459][ T5988] bridge_slave_0: left allmulticast mode [ 553.437288][ T5988] bridge_slave_0: left promiscuous mode [ 553.444099][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.016155][ T6830] Bluetooth: hci2: command tx timeout [ 555.746193][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.758680][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.769751][ T5988] bond0 (unregistering): Released all slaves [ 555.807335][ T6252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.818891][ T6252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.106687][ T6830] Bluetooth: hci2: command tx timeout [ 557.156634][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 557.385542][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 557.438989][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 557.513700][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 557.646672][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 557.995345][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 558.091191][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 558.119045][ T10] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 558.128706][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.155362][ T10] usb 2-1: Product: syz [ 558.170201][ T10] usb 2-1: Manufacturer: syz [ 558.175007][ T10] usb 2-1: SerialNumber: syz [ 558.185962][ T5831] Bluetooth: hci2: command tx timeout [ 558.211443][ T10] usb 2-1: config 0 descriptor?? [ 558.375703][ T9149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 558.436389][ T9149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 558.775826][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 558.817492][ T10] usb 2-1: USB disconnect, device number 5 [ 558.817545][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 558.832386][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 558.945431][ T5988] hsr_slave_0: left promiscuous mode [ 558.964202][ T5988] hsr_slave_1: left promiscuous mode [ 558.992505][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.011929][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.027333][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.039282][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.082564][ T5988] veth1_macvtap: left promiscuous mode [ 559.096015][ T5988] veth0_macvtap: left promiscuous mode [ 559.108595][ T5988] veth1_vlan: left promiscuous mode [ 559.122564][ T5988] veth0_vlan: left promiscuous mode [ 560.255343][ T5831] Bluetooth: hci2: command tx timeout [ 562.858074][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 563.018092][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 563.379472][ T9194] fuse: Unknown parameter 'user_id00000000000000000000' [ 564.995079][ T9016] veth0_vlan: entered promiscuous mode [ 565.430457][ T9016] veth1_vlan: entered promiscuous mode [ 565.443067][ T9212] No source specified [ 565.634328][ T9016] veth0_macvtap: entered promiscuous mode [ 565.712322][ T9016] veth1_macvtap: entered promiscuous mode [ 567.220348][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.285627][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 567.450716][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.514136][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.536924][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.649162][ T1985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.726513][ T1985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.902039][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.925574][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.932766][ T9121] bridge_slave_0: entered allmulticast mode [ 567.976977][ T9121] bridge_slave_0: entered promiscuous mode [ 568.007364][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.014496][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.033241][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.039980][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.046337][ T9121] bridge_slave_1: entered allmulticast mode [ 568.068083][ T9121] bridge_slave_1: entered promiscuous mode [ 568.090584][ T5886] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 568.239605][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.285456][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 568.287816][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.298758][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 568.332786][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 568.375791][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 568.415304][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 568.455656][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 568.496309][ T5886] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 568.515288][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.523319][ T5886] usb 2-1: Product: syz [ 568.539519][ T5886] usb 2-1: Manufacturer: syz [ 568.544296][ T5886] usb 2-1: SerialNumber: syz [ 568.570801][ T5886] usb 2-1: config 0 descriptor?? [ 568.578924][ T9121] team0: Port device team_slave_0 added [ 568.587179][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.600387][ T9226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 568.612759][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.627566][ T9226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 568.693916][ T9121] team0: Port device team_slave_1 added [ 569.611387][ T5886] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 569.733023][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.740204][ T5886] usb 2-1: USB disconnect, device number 6 [ 569.740289][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 569.740346][ C1] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 569.922975][ T9238] No source specified [ 569.945362][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.052227][ T9121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.243183][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.883230][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.094508][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 571.113432][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.132308][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.189466][ T9121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.459956][ T9251] Bluetooth: MGMT ver 1.23 [ 572.076766][ T9121] hsr_slave_0: entered promiscuous mode [ 572.242913][ T9121] hsr_slave_1: entered promiscuous mode [ 574.816820][ T9268] fuse: Unknown parameter 'user_id00000000000000000000' [ 578.749028][ T8732] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 578.965882][ T8732] usb 3-1: Using ep0 maxpacket: 32 [ 579.033620][ T8732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 579.092882][ T8732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 579.138137][ T8732] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 579.226882][ T8732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 579.288260][ T8732] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 579.315299][ T8732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.355444][ T8732] usb 3-1: Product: syz [ 579.365283][ T8732] usb 3-1: Manufacturer: syz [ 579.380203][ T8732] usb 3-1: SerialNumber: syz [ 579.408486][ T8732] usb 3-1: config 0 descriptor?? [ 579.428617][ T9278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 579.470101][ T9121] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 579.513472][ T9121] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 579.583028][ T9121] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 579.632349][ T9121] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 579.678113][ T5886] usb 3-1: USB disconnect, device number 7 [ 580.582819][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.391264][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.689469][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.696719][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.167651][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.174971][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.556753][ T9121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 584.611454][ T9121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.375026][ T7376] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.590236][ T7376] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.677513][ T7376] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.805882][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.897864][ T7376] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.315568][ T7376] bridge_slave_1: left allmulticast mode [ 586.321301][ T7376] bridge_slave_1: left promiscuous mode [ 586.347775][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.385069][ T7376] bridge_slave_0: left allmulticast mode [ 586.427488][ T7376] bridge_slave_0: left promiscuous mode [ 586.433329][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.142819][ T6830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 588.151636][ T6830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 588.240341][ T6830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 588.262438][ T6830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 588.278799][ T6830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 590.572848][ T6830] Bluetooth: hci4: command tx timeout [ 591.047216][ T8647] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 591.048666][ T7376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.069629][ T7376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.088415][ T7376] bond0 (unregistering): Released all slaves [ 591.235942][ T8647] usb 3-1: Using ep0 maxpacket: 32 [ 591.243090][ T8647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 591.271396][ T8647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 591.323702][ T8647] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 591.347152][ T8647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 591.360520][ T8647] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 591.376531][ T8647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.384657][ T8647] usb 3-1: Product: syz [ 591.410993][ T8647] usb 3-1: Manufacturer: syz [ 591.421745][ T8647] usb 3-1: SerialNumber: syz [ 591.434962][ T8647] usb 3-1: config 0 descriptor?? [ 591.442271][ T9359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 591.557463][ T9121] veth0_vlan: entered promiscuous mode [ 591.573852][ T9121] veth1_vlan: entered promiscuous mode [ 591.615230][ T9121] veth0_macvtap: entered promiscuous mode [ 591.635959][ T9121] veth1_macvtap: entered promiscuous mode [ 591.673885][ T5827] usb 3-1: USB disconnect, device number 8 [ 592.126264][ T9368] ./cgroup: Can't lookup blockdev [ 594.095342][ T6830] Bluetooth: hci4: command tx timeout [ 594.105919][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.454172][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 594.473813][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 594.486912][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 594.936148][ T9382] ./cgroup: Can't lookup blockdev [ 595.201191][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 595.214890][ T9343] chnl_net:caif_netlink_parms(): no params data found [ 595.276322][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 595.388615][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.572504][ T5988] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.584749][ T5988] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.669898][ T5988] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.679569][ T5988] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.704656][ T7376] hsr_slave_0: left promiscuous mode [ 595.716343][ T7376] hsr_slave_1: left promiscuous mode [ 595.722576][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.745559][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.770360][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.785752][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.823789][ T7376] veth1_macvtap: left promiscuous mode [ 595.845344][ T7376] veth0_macvtap: left promiscuous mode [ 595.851181][ T7376] veth1_vlan: left promiscuous mode [ 595.876071][ T7376] veth0_vlan: left promiscuous mode [ 597.046592][ T5831] Bluetooth: hci4: command tx timeout [ 598.045352][ T5831] Bluetooth: hci3: command tx timeout [ 598.475520][ T5827] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 598.658650][ T5827] usb 2-1: unable to get BOS descriptor or descriptor too short [ 598.687925][ T5827] usb 2-1: config 3 has an invalid interface number: 57 but max is 0 [ 598.699876][ T5827] usb 2-1: config 3 has an invalid interface association descriptor of length 7, skipping [ 598.721017][ T5827] usb 2-1: config 3 has no interface number 0 [ 598.734807][ T5827] usb 2-1: config 3 interface 57 has no altsetting 0 [ 598.758564][ T5827] usb 2-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=c4.48 [ 598.776794][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.796708][ T5827] usb 2-1: Product: syz [ 598.801106][ T5827] usb 2-1: Manufacturer: syz [ 598.817184][ T5827] usb 2-1: SerialNumber: syz [ 599.057039][ T5831] Bluetooth: hci4: command tx timeout [ 599.100281][ T7376] team0 (unregistering): Port device team_slave_1 removed [ 599.150376][ T5827] usb 2-1: USB disconnect, device number 7 [ 599.177548][ T7376] team0 (unregistering): Port device team_slave_0 removed [ 600.095328][ T5831] Bluetooth: hci3: command tx timeout [ 600.150106][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.183422][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.190794][ T9343] bridge_slave_0: entered allmulticast mode [ 600.210020][ T9343] bridge_slave_0: entered promiscuous mode [ 600.251689][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.273134][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.280874][ T9343] bridge_slave_1: entered allmulticast mode [ 600.301953][ T9343] bridge_slave_1: entered promiscuous mode [ 600.875712][ T9343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.005691][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.013797][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.060115][ T9343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.201961][ T9343] team0: Port device team_slave_0 added [ 601.268988][ T9343] team0: Port device team_slave_1 added [ 601.508187][ T7618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.519715][ T7618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.613256][ T9418] Bluetooth: MGMT ver 1.23 [ 602.085115][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.126298][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.160158][ T9343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.175383][ T5831] Bluetooth: hci3: command tx timeout [ 602.212743][ T9379] chnl_net:caif_netlink_parms(): no params data found [ 602.241855][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.249200][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.286429][ T9343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.255702][ T5831] Bluetooth: hci3: command tx timeout [ 604.461677][ T9379] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.646488][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.018296][ T9440] ./cgroup: Can't lookup blockdev [ 605.316530][ T9379] bridge_slave_0: entered allmulticast mode [ 605.324573][ T9379] bridge_slave_0: entered promiscuous mode [ 605.365394][ T5935] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 605.832696][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 605.877795][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 605.877870][ T7376] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.910637][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 605.934491][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 606.911913][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 607.037704][ T5935] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 607.046877][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.055054][ T5935] usb 2-1: Product: syz [ 607.085058][ T9343] hsr_slave_0: entered promiscuous mode [ 607.110157][ T9343] hsr_slave_1: entered promiscuous mode [ 607.117722][ T5935] usb 2-1: Manufacturer: syz [ 607.122348][ T5935] usb 2-1: SerialNumber: syz [ 607.146423][ T9343] debugfs: 'hsr0' already exists in 'hsr' [ 607.152183][ T9343] Cannot create hsr debugfs directory [ 607.160244][ T5935] usb 2-1: config 0 descriptor?? [ 607.177886][ T9379] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.187263][ T9433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.195779][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.203082][ T9379] bridge_slave_1: entered allmulticast mode [ 607.230071][ T9379] bridge_slave_1: entered promiscuous mode [ 607.280625][ T7376] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.351814][ T9379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.400682][ T5972] usb 2-1: USB disconnect, device number 8 [ 607.428828][ T9379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.500819][ T7376] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.157395][ T9379] team0: Port device team_slave_0 added [ 608.203865][ T7376] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.249653][ T9379] team0: Port device team_slave_1 added [ 608.977373][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.986521][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.018854][ T9379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.040772][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.053712][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.095942][ T9379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.923231][ T9471] ./cgroup: Can't lookup blockdev [ 611.023182][ T9379] hsr_slave_0: entered promiscuous mode [ 611.044433][ T9379] hsr_slave_1: entered promiscuous mode [ 611.072261][ T9379] debugfs: 'hsr0' already exists in 'hsr' [ 611.078218][ T9379] Cannot create hsr debugfs directory [ 611.184207][ T9482] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 611.267534][ T7376] bridge_slave_1: left allmulticast mode [ 611.273204][ T7376] bridge_slave_1: left promiscuous mode [ 611.281558][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.306460][ T7376] bridge_slave_0: left allmulticast mode [ 611.312220][ T7376] bridge_slave_0: left promiscuous mode [ 611.319153][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.677746][ T7376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.696411][ T7376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.708262][ T7376] bond0 (unregistering): Released all slaves [ 612.633188][ T7376] hsr_slave_0: left promiscuous mode [ 612.663606][ T7376] hsr_slave_1: left promiscuous mode [ 612.676296][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.705289][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.734006][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.766023][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.807915][ T9495] No source specified [ 612.872154][ T7376] veth1_macvtap: left promiscuous mode [ 612.878149][ T7376] veth0_macvtap: left promiscuous mode [ 612.883795][ T7376] veth1_vlan: left promiscuous mode [ 612.899517][ T7376] veth0_vlan: left promiscuous mode [ 614.325334][ T6066] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 614.447873][ T7376] team0 (unregistering): Port device team_slave_1 removed [ 614.483706][ T7376] team0 (unregistering): Port device team_slave_0 removed [ 614.495339][ T6066] usb 2-1: Using ep0 maxpacket: 32 [ 614.502203][ T6066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 614.531656][ T6066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 614.545718][ T6066] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 614.558522][ T6066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 614.570799][ T6066] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 614.580497][ T6066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.588944][ T6066] usb 2-1: Product: syz [ 614.593155][ T6066] usb 2-1: Manufacturer: syz [ 614.598418][ T6066] usb 2-1: SerialNumber: syz [ 614.610474][ T6066] usb 2-1: config 0 descriptor?? [ 614.619302][ T9503] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 614.833995][ T5907] usb 2-1: USB disconnect, device number 9 [ 615.086206][ T9343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 615.182637][ T9343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 615.234004][ T9343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 615.279094][ T9343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 619.777397][ T9343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.829328][ T9379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 619.843580][ T9537] fuse: Unknown parameter 'user_id00000000000000000000' [ 619.857654][ T9343] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.895727][ T9379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 619.971296][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.978650][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.703733][ T9379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 620.867858][ T9379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 621.058634][ T9543] syzkaller0: entered promiscuous mode [ 621.065128][ T9543] syzkaller0: entered allmulticast mode [ 621.074568][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.081766][ T7376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.712556][ T9379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.781348][ T9379] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.135932][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.143240][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.513241][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.542325][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.628995][ T1985] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.636276][ T1985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.944801][ T9379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 631.008700][ T9379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.093685][ T9606] loop4: detected capacity change from 0 to 2560 [ 631.162377][ T9606] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 631.181054][ T9343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.189078][ T9606] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 631.236502][ T9606] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 631.255429][ T9606] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 631.266212][ T9606] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 631.323653][ T9606] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 631.388253][ T9606] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 631.444292][ T9606] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 631.457798][ T9617] No source specified [ 631.535557][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 631.572856][ T9606] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 631.630490][ T9606] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 633.803203][ T9379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.823336][ T9343] veth0_vlan: entered promiscuous mode [ 633.886848][ T9343] veth1_vlan: entered promiscuous mode [ 634.038195][ T9343] veth0_macvtap: entered promiscuous mode [ 634.103389][ T9343] veth1_macvtap: entered promiscuous mode [ 634.166137][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.200205][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.240083][ T5988] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.277396][ T5988] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.318555][ T5988] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.409107][ T2998] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.326090][ T5953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.355968][ T5953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.404513][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.412523][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.656541][ T6830] Bluetooth: hci1: command 0x0406 tx timeout [ 636.847272][ T9379] veth0_vlan: entered promiscuous mode [ 637.016797][ T9379] veth1_vlan: entered promiscuous mode [ 640.308345][ T9379] veth0_macvtap: entered promiscuous mode [ 640.347769][ T9379] veth1_macvtap: entered promiscuous mode [ 640.629878][ T9379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.655130][ T9379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.067339][ T9673] ./cgroup: Can't lookup blockdev [ 641.534361][ T1985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.597012][ T1985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.635923][ T1985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.666512][ T1985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.796951][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 641.937377][ T1985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.965278][ T1985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.119622][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.145317][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.297405][ T9680] syzkaller0: entered promiscuous mode [ 642.303000][ T9680] syzkaller0: entered allmulticast mode [ 648.904659][ T9693] syzkaller0: entered promiscuous mode [ 648.951338][ T9693] syzkaller0: entered allmulticast mode [ 650.966532][ T6830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 650.974927][ T6830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 650.986561][ T6830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 650.994668][ T6830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 651.002547][ T6830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 653.055383][ T5831] Bluetooth: hci5: command tx timeout [ 655.146583][ T5831] Bluetooth: hci5: command tx timeout [ 657.215293][ T5831] Bluetooth: hci5: command tx timeout [ 658.981551][ T9756] loop1: detected capacity change from 0 to 128 [ 659.160982][ T9756] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 659.188967][ T9756] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 659.348261][ T5831] Bluetooth: hci5: command tx timeout [ 660.111591][ T8875] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 660.124875][ T3445] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.335568][ T8092] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 660.497921][ T8092] usb 7-1: Using ep0 maxpacket: 8 [ 660.506588][ T8092] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 660.519710][ T8092] usb 7-1: config 0 has no interface number 0 [ 660.535570][ T8092] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 660.556074][ T3445] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.623001][ T8092] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 662.546918][ T8092] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.571863][ T8092] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 662.594467][ T8092] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 663.105415][ T8092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.131408][ T8092] usb 7-1: config 0 descriptor?? [ 663.137229][ T8092] usb 7-1: can't set config #0, error -71 [ 663.144600][ T8092] usb 7-1: USB disconnect, device number 7 [ 663.233311][ T3445] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.265180][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 768.272271][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5193/1:b..l [ 768.281189][ C1] rcu: (detected by 1, t=10503 jiffies, g=54945, q=678 ncpus=2) [ 768.288987][ C1] task:udevd state:R running task stack:23288 pid:5193 tgid:5193 ppid:1 task_flags:0x400140 flags:0x00080000 [ 768.303619][ C1] Call Trace: [ 768.306927][ C1] [ 768.309869][ C1] __schedule+0x14db/0x5030 [ 768.314415][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 768.319578][ C1] ? __pfx___schedule+0x10/0x10 [ 768.324450][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.330540][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 768.335514][ C1] preempt_schedule_irq+0x4d/0xa0 [ 768.340560][ C1] irqentry_exit+0x5e3/0x670 [ 768.345266][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 768.351487][ C1] RIP: 0010:lock_acquire+0x222/0x340 [ 768.356800][ C1] Code: ff ff ff e8 00 c6 c0 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 1a 34 04 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ff a3 c3 09 cc 48 8d 3d d7 c3 07 [ 768.376465][ C1] RSP: 0018:ffffc90003017400 EFLAGS: 00000286 [ 768.382557][ C1] RAX: 0ce267260a42f700 RBX: 0000000000000000 RCX: 0000000000000046 [ 768.390536][ C1] RDX: 00000000da3da63d RSI: ffffffff8db8dbf6 RDI: ffffffff8be09d60 [ 768.398520][ C1] RBP: ffffffff82320bba R08: ffffffff82320bba R09: ffffffff8e144f60 [ 768.406502][ C1] R10: ffff88807f2a4558 R11: ffffffff81ad18d0 R12: 0000000000000002 [ 768.414483][ C1] R13: ffffffff8e144f60 R14: 0000000000000000 R15: 0000000000000246 [ 768.422498][ C1] ? __update_page_owner_handle+0x5a/0x570 [ 768.428329][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 768.434502][ C1] ? __update_page_owner_handle+0x5a/0x570 [ 768.440431][ C1] ? __update_page_owner_handle+0x5a/0x570 [ 768.446358][ C1] __update_page_owner_handle+0x77/0x570 [ 768.452011][ C1] ? __update_page_owner_handle+0x5a/0x570 [ 768.457835][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.463913][ C1] __set_page_owner+0x10b/0x4c0 [ 768.468866][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 768.474249][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 768.480327][ C1] ? bad_range+0x8b/0x2c0 [ 768.484665][ C1] post_alloc_hook+0x23d/0x2a0 [ 768.489479][ C1] get_page_from_freelist+0x23a5/0x2440 [ 768.495160][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 768.500335][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 768.506162][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 768.512516][ C1] ? policy_nodemask+0x27c/0x720 [ 768.517476][ C1] ? ___slab_alloc+0x137/0x17b0 [ 768.522393][ C1] alloc_pages_mpol+0x232/0x4a0 [ 768.527314][ C1] allocate_slab+0x86/0x3b0 [ 768.531828][ C1] ___slab_alloc+0xdb6/0x17b0 [ 768.536526][ C1] ? kobject_uevent_env+0x28c/0x9f0 [ 768.541736][ C1] ? kobject_uevent_env+0x28c/0x9f0 [ 768.546974][ C1] __slab_alloc+0x65/0x100 [ 768.551440][ C1] __kmalloc_cache_noprof+0x41e/0x700 [ 768.556834][ C1] ? trace_contention_end+0x39/0x100 [ 768.562138][ C1] ? kobject_uevent_env+0x28c/0x9f0 [ 768.567344][ C1] ? __mutex_lock+0x335/0x1350 [ 768.572119][ C1] ? __pfx_dev_uevent_name+0x10/0x10 [ 768.577436][ C1] kobject_uevent_env+0x28c/0x9f0 [ 768.582504][ C1] ? kobject_synth_uevent+0x96/0xb00 [ 768.587809][ C1] kobject_synth_uevent+0x527/0xb00 [ 768.593031][ C1] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 768.598788][ C1] ? sysfs_file_kobj+0x1a/0x230 [ 768.603653][ C1] ? sysfs_file_kobj+0x1e4/0x230 [ 768.608603][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 768.613814][ C1] uevent_store+0x26/0x70 [ 768.618158][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 768.623380][ C1] kernfs_fop_write_iter+0x3af/0x540 [ 768.628707][ C1] vfs_write+0x5c9/0xb30 [ 768.632966][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 768.638818][ C1] ? __pfx_vfs_write+0x10/0x10 [ 768.643618][ C1] ksys_write+0x145/0x250 [ 768.647967][ C1] ? __pfx_ksys_write+0x10/0x10 [ 768.652848][ C1] do_syscall_64+0xec/0xf80 [ 768.657371][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.663479][ C1] ? trace_irq_disable+0x37/0x100 [ 768.668521][ C1] ? clear_bhb_loop+0x40/0x90 [ 768.673211][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.679188][ C1] RIP: 0033:0x7f3b006a7407 [ 768.683653][ C1] RSP: 002b:00007ffc5a90d2b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 768.692089][ C1] RAX: ffffffffffffffda RBX: 00007f3b00e3b880 RCX: 00007f3b006a7407 [ 768.700074][ C1] RDX: 0000000000000007 RSI: 0000562e233a2f20 RDI: 000000000000000c [ 768.708156][ C1] RBP: 0000562e233a2f20 R08: 0000000000000000 R09: 0000000000000000 [ 768.716142][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000007 [ 768.724218][ C1] R13: 0000562e233966d0 R14: 00007f3b007efea0 R15: 00007ffc5a90d5f0 [ 768.733843][ C1] [ 768.737400][ C1] rcu: rcu_preempt kthread starved for 10465 jiffies! g54945 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 768.749614][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 768.759918][ C1] rcu: RCU grace-period kthread stack dump: [ 768.766405][ C1] task:rcu_preempt state:R running task stack:27584 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 768.780820][ C1] Call Trace: [ 768.784107][ C1] [ 768.787054][ C1] __schedule+0x14db/0x5030 [ 768.791611][ C1] ? do_raw_spin_lock+0x121/0x290 [ 768.796655][ C1] ? __pfx___schedule+0x10/0x10 [ 768.801529][ C1] ? schedule+0x91/0x360 [ 768.805786][ C1] schedule+0x165/0x360 [ 768.809955][ C1] schedule_timeout+0x12b/0x270 [ 768.814822][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 768.820211][ C1] ? __pfx_process_timeout+0x10/0x10 [ 768.825539][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 768.831394][ C1] ? prepare_to_swait_event+0x341/0x380 [ 768.837004][ C1] rcu_gp_fqs_loop+0x301/0x11b0 [ 768.841881][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 768.847094][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 768.852926][ C1] ? rcu_gp_init+0x144f/0x1700 [ 768.857707][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 768.863877][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 768.869174][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 768.874402][ C1] rcu_gp_kthread+0x9b/0x2d0 [ 768.879065][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 768.884381][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 768.891041][ C1] ? __kthread_parkme+0x7b/0x200 [ 768.896353][ C1] ? __kthread_parkme+0x1a1/0x200 [ 768.901583][ C1] kthread+0x389/0x480 [ 768.905782][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 768.911084][ C1] ? __pfx_kthread+0x10/0x10 [ 768.915695][ C1] ret_from_fork+0x510/0xa50 [ 768.920311][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 768.925628][ C1] ? __switch_to+0xc9e/0x1480 [ 768.930444][ C1] ? __pfx_kthread+0x10/0x10 [ 768.936412][ C1] ret_from_fork_asm+0x1a/0x30 [ 768.941787][ C1] [ 768.945561][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 768.952735][ C1] Sending NMI from CPU 1 to CPUs 0: [ 768.959261][ C0] NMI backtrace for cpu 0 [ 768.959301][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 768.959331][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 768.959346][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 768.959377][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 3f 29 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 768.959394][ C0] RSP: 0018:ffffffff8de07dc0 EFLAGS: 000002c2 [ 768.959410][ C0] RAX: 0000000001258791 RBX: ffffffff81977eae RCX: 0000000080000001 [ 768.959433][ C0] RDX: 0000000000000001 RSI: ffffffff8d9a99b4 RDI: ffffffff8be09d60 [ 768.959663][ C0] RBP: ffffffff8de07eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 768.959694][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff8fa2d8f0 [ 768.959709][ C0] R13: 1ffffffff1bd29d0 R14: 0000000000000000 R15: 0000000000000000 [ 768.959721][ C0] FS: 0000000000000000(0000) GS:ffff888125bf7000(0000) knlGS:0000000000000000 [ 768.959737][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.959750][ C0] CR2: 0000200000004000 CR3: 000000003196e000 CR4: 00000000003526f0 [ 768.959767][ C0] Call Trace: [ 768.959778][ C0] [ 768.959786][ C0] default_idle+0x13/0x20 [ 768.959812][ C0] default_idle_call+0x73/0xb0 [ 768.959836][ C0] do_idle+0x1be/0x4d0 [ 768.959861][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 768.959882][ C0] ? __pfx_do_idle+0x10/0x10 [ 768.959912][ C0] cpu_startup_entry+0x44/0x60 [ 768.959938][ C0] rest_init+0x2de/0x300 [ 768.959963][ C0] start_kernel+0x38b/0x3e0 [ 768.959993][ C0] x86_64_start_reservations+0x24/0x30 [ 768.960015][ C0] x86_64_start_kernel+0x143/0x1c0 [ 768.960036][ C0] common_startup_64+0x13e/0x147 [ 768.960073][ C0]